Advisories · Technology
Red Hat multicluster engine for Kubernetes 2.1.
Every CVE that names Red Hat multicluster engine for Kubernetes 2.1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.1 CriticalCritical · CVSS 9+
Cluster-curator-controller: cluster-curator-controller: namespace admin can escalate to cluster-wide curator authority via clustercurator serviceaccount token
- Red Hat multicluster engine for Kubernetes 2.1
- Red Hat multicluster engine for Kubernetes 2.11
- Privilege escalation
- CVSS 9.4 CriticalCritical · CVSS 9+
Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates
- Red Hat multicluster engine for Kubernetes 2.1
- Red Hat multicluster engine for Kubernetes 2.11
- Authentication bypass
- CVSS 6.1 Medium
Assisted-service: assisted-service: authenticated users can gain administrative access to openshift clusters via credential disclosure
- Red Hat multicluster engine for Kubernetes 2.1
- Red Hat multicluster engine for Kubernetes 2.11
- Information disclosure