PT-2025-27605 · Red Hat · Red Hat Advanced Cluster Management

Osidb Bzimport · Published 2025-07-02 · Updated 2025-07-02 · CVE-2025-6017

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Red Hat Advanced Cluster Management versions 2.10 through 2.10.6 Red Hat Advanced Cluster Management versions 2.11 through 2.11.3 Red Hat Advanced Cluster Management versions 2.12 through 2.12.3

Description: A flaw in Red Hat Advanced Cluster Management allows an unprivileged user to access confidential managed cluster credentials through the UI. This information should only be accessible to authorized users and may result in the loss of confidentiality of administrative information, which could be leaked to unauthorized actors.

Recommendations: For versions 2.10 through 2.10.6, update to version 2.10.7 or later. For versions 2.11 through 2.11.3, update to version 2.11.4 or later. For versions 2.12 through 2.12.3, update to version 2.12.4 or later.

Fix

Weakness Enumeration

CWE-359

Related Identifiers

CVE-2025-6017

Affected Products

Red Hat Advanced Cluster Management

References · 7

• https://osv.dev/vulnerability/CVE-2025-6017 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2372362 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2025-6017 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6017 · Security Note
• https://twitter.com/VulmonFeeds/status/1940317337858572541 · Twitter Post
• https://twitter.com/CVEnew/status/1940308624284233922 · Twitter Post
• https://t.me/cvenotify/127354 · Telegram Post