Red Hat Open Cluster Management vulnerabilities

1 vulnerability

Known vulnerabilities in Red Hat Open Cluster Management, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2020-25655red hatopen-cluster-management+1
EPSS score
0.61%
An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct permissions. Views created for an admin user would be made available for a short time to users with only view permission. In this short time window the user with view permission could read cluster secrets that should only be disclosed to admin users.