Advisories · Technology
Red Hat Multicluster Global Hub 1.5.8.
Every CVE that names Red Hat Multicluster Global Hub 1.5.8 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.9 CriticalCritical · CVSS 9+
Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters
- Red Hat Multicluster Global Hub 1.4.9
- Red Hat Multicluster Global Hub 1.5.8
- Broken access control
- CVSS 6.3 Medium
Multicluster-global-hub: multicluster-global-hub: spec-topic read acl leaks bootstrap kubeconfigs to all managed hubs during migration
- Red Hat Multicluster Global Hub 1.4.9
- Red Hat Multicluster Global Hub 1.5.8
- Hard-coded credentials
- CVSS 8.5 High
Multicluster-global-hub: multicluster-global-hub: manager trusts self-asserted evt.source() for leaf-hub identity in all status handlers
- Red Hat Multicluster Global Hub 1.4.9
- Red Hat Multicluster Global Hub 1.5.8
- CWE-345