PT-2025-33706 · Red Hat · Red Hat Developer Hub Rhdh/Rhdh-Hub-Rhel9

Published 2025-08-19 · Updated 2025-08-19 · CVE-2025-5417

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image (affected versions not specified)

Description: An insufficient access control issue exists in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. A cluster admin/user with standard user access to the cluster and the Red Hat Developer Hub namespace can access and modify the container image's content. This impacts the confidentiality and integrity of the data. Changes made are not persistent and are reset upon pod restart.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2025-5417

Affected Products

Red Hat Developer Hub Rhdh/Rhdh-Hub-Rhel9

References · 8

• https://access.redhat.com/errata/RHSA-2025:14090 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-5417 · Security Note
• https://t.me/cveNotify/132754 · Telegram Post
• https://bugzilla.redhat.com/show_bug.cgi?id=2369602 · Note
• https://twitter.com/CVEnew/status/1957665017681133623 · Twitter Post
• https://access.redhat.com/security/cve/CVE-2025-5417 · Note
• https://twitter.com/VulmonFeeds/status/1957695370227552588 · Twitter Post
• https://t.me/CVEtracker/30331 · Telegram Post