Where
-Infinity
0
Severity
9
Path Traversal

Critical: Red Hat Advanced Cluster Management 2.9.2 security and bug fix container updates

1 / 2
Source: Red Hat

Remedy

For Red Hat Advanced Cluster Management for Kubernetes, see the following<br>documentation, which will be updated shortly for this release:<br><a href="https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.9/html-single/install/index#installing" target="_blank">https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.9/html-single/install/index#installing</a>
First published (updated )
Severity
9

Critical: Red Hat Advanced Cluster Management 2.7.11 security and bug fix container update

1 / 2
Source: Red Hat

Remedy

For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:<br><a href="https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.7/html/install/installing" target="_blank">https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.7/html/install/installing</a>
First published (updated )
Severity
9

Critical: Red Hat Advanced Cluster Management 2.8.5 security and bug fix container updates

1 / 2
Source: Red Hat

Remedy

For more information, see Red Hat Advanced Cluster Management for Kubernetes product documentation:<br><a href="https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.8" target="_blank">https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.8</a>
First published (updated )
Severity
9

Critical: Red Hat Advanced Cluster Management 2.6.6 security fixes and container updates

Remedy

For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation for details on how to install the images:<br><a href="https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.6/html/install/installing#installing-while-connected-online" target="_blank">https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.6/html/install/installing#installing-while-connected-online</a>
First published (updated )
Severity
9

Critical: Red Hat Advanced Cluster Management 2.5.9 security fixes and container updates

Remedy

For Red Hat Advanced Cluster Management for Kubernetes, see the following<br>documentation, which will be updated shortly for this release, for important<br>instructions about installing this release:<br><a href="https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.5/html-single/install/index#installing" target="_blank">https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.5/html-single/install/index#installing</a>
First published (updated )
Severity
9

Critical: Red Hat Advanced Cluster Management 2.7.4 security fixes and container updates

1 / 2

Remedy

For Red Hat Advanced Cluster Management for Kubernetes, see the following<br>documentation, which will be updated shortly for this release, for important<br>instructions on installing this release:<br><a href="https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.7/html-single/install/index#installing" target="_blank">https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.7/html-single/install/index#installing</a>
First published (updated )
Severity
7.8
SSRF, CSRF
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A Server-Side Request Forgery (SSRF) vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes (RHACM). An attacker could take advantage of this as the console API endpoint is missing an authentication check, allowing unauthenticated users making requests.

1 / 3
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management 2.11.3 bug fixes and container updates

1 / 2
Source: Red Hat

Remedy

Before applying this update, make sure all previously released errata<br>relevant to your system have been applied.<br>For details on how to apply this update, refer to:<br><a href="https://access.redhat.com/articles/11258" target="_blank">https://access.redhat.com/articles/11258</a>
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management 2.9.5 bug fixes and container updates

1 / 2
Source: Red Hat

Remedy

Before applying this update, make sure all previously released errata<br>relevant to your system have been applied.<br>For details on how to apply this update, refer to:<br><a href="https://access.redhat.com/articles/11258" target="_blank">https://access.redhat.com/articles/11258</a>
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management 2.12.0 security and bug fixes

1 / 2
Source: Red Hat

Remedy

For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation for details on how to install the images: <br><a href="https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/install/installing" target="_blank">https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/install/installing</a>
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management 2.8.8 bug fixes and container updates

1 / 2
Source: Red Hat

Remedy

Before applying this update, make sure all previously released errata<br>relevant to your system have been applied.<br>For details on how to apply this update, refer to:<br><a href="https://access.redhat.com/articles/11258" target="_blank">https://access.redhat.com/articles/11258</a>
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management 2.9.6 bug fixes and container updates

Remedy

Before applying this update, make sure all previously released errata<br>relevant to your system have been applied.
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management 2.11.5 bug fixes and container updates

1 / 2
Source: Red Hat

Remedy

Before applying this update, make sure all previously released errata<br>relevant to your system have been applied.
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management 2.12.2 security and bug fix updates

Remedy

Before applying this update, make sure all previously released errata<br>relevant to your system have been applied.
First published (updated )
Severity
7

Important: Red Hat Edge Manager Version 0.5.1 (Technology Preview) security fixes

1 / 2
Source: Red Hat

Remedy

See the following documentation for details on how to enable Red Hat Edge<br>Manager and more:<br><a href="https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.13/html-single/edge_manager/index#edge-mgr-intro" target="_blank">https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.13/html-single/edge_manager/index#edge-mgr-intro</a>
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management 2.13.2 container image updates

Remedy

Before applying this update, make sure all previously released erratas are<br>relevant and have been applied to your system.
First published (updated )
Severity
7

Important: VolSync 0.11.2 security fixes and enhancements for RHEL 9

1 / 2
Source: Red Hat

Remedy

For more details, see the Red Hat Advanced Cluster Management for Kubernetes<br>documentation:<br><a href="https://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/business_continuity/business-cont-overview#volsync" target="_blank">https://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/business_continuity/business-cont-overview#volsync</a>
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management 2.12.3 container image updates

1 / 2
Source: Red Hat

Remedy

Before applying this update, make sure all previously released erratas are<br>relevant and have been applied to your system.
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management 2.10.8 container updates

1 / 2
Source: Red Hat

Remedy

Before applying this update, make sure all previously released erratas are<br>relevant and have been applied to your system.
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management 2.11.7 container updates

1 / 2
Source: Red Hat

Remedy

Before applying this update, make sure all previously released erratas are<br>relevant and have been applied to your system.
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management 2.9.9 bug fixes and container updates

Remedy

Before applying this update, make sure all previously released errata<br>relevant to your system have been applied.
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management 2.13.3 fixes and container updates

1 / 2
Source: Red Hat

Remedy

Before applying this update, make sure all previously released errata<br>relevant to your system have been applied.
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management for Kubernetes 2.14.1 security update

1 / 2
Source: Red Hat

Remedy

Before you apply this update, make sure all previously released errata<br>that are relevant to your system are applied.<br>For details on how to apply this update, refer to:<br><a href="https://access.redhat.com/articles/11258" target="_blank">https://access.redhat.com/articles/11258</a>
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management for Kubernetes 2.12.6 security update

1 / 2
Source: Red Hat

Remedy

Before you apply this update, make sure all previously released errata<br>that are relevant to your system are applied.<br>For details on how to apply this update, refer to:<br><a href="https://access.redhat.com/articles/11258" target="_blank">https://access.redhat.com/articles/11258</a>
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management for Kubernetes 2.12.6 security update

Remedy

Before you apply this update, make sure all previously released errata<br>that are relevant to your system are applied.<br>For details on how to apply this update, refer to:<br><a href="https://access.redhat.com/articles/11258" target="_blank">https://access.redhat.com/articles/11258</a>
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management for Kubernetes v2.14.3 security update

1 / 2
Source: Red Hat
First published (updated )
Severity
7

Important: Red Hat Advanced Cluster Management 2.8.3 security and bug fix updates

1 / 2

Remedy

For Red Hat Advanced Cluster Management for Kubernetes, see the following<br>documentation, which will be updated shortly for this release, for important<br>instructions on installing this release:<br><a href="https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.8/html-single/install/index#installing" target="_blank">https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.8/html-single/install/index#installing</a>
First published (updated )
Severity
6.5
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

A vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for Kubernetes when a query in the search filter gets parsed by the backend. This flaw allows an attacker to craft specific strings containing special characters that lead to crashing the pod and affects system availability while restarting.

1 / 3
First published (updated )
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct permissions. Views created for an admin user would be made available for a short time to users with only view permission. In this short time window the user with view permission could read cluster secrets that should only be disclosed to admin users.

First published (updated )
Severity
5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. The cluster Proxy object is dumped in raw form, bypassing the oc inspect redaction that would normally sanitize sensitive fields. This exposes proxy basic-auth credentials in the must-gather archive, potentially disclosing sensitive authentication information to anyone with access to the archive.

1 / 2
Source: MITRE
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203