CVE-2026-7163 Assisted-service: assisted-service: authenticated users can gain administrative access to openshift clusters via credential disclosure

[
  {
    "vendor": "Red Hat",
    "product": "multicluster engine for Kubernetes 2.10",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "multicluster-engine/assisted-service-9-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1776983527",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:multicluster_engine:2.10::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "multicluster engine for Kubernetes 2.11",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "multicluster-engine/assisted-service-9-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1776987609",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:multicluster_engine:2.11::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "multicluster engine for Kubernetes 2.7",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "multicluster-engine/assisted-service-8-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1777205801",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:multicluster_engine:2.7::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "multicluster engine for Kubernetes 2.7",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "multicluster-engine/assisted-service-9-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1777205772",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:multicluster_engine:2.7::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "multicluster engine for Kubernetes 2.9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "multicluster-engine/assisted-service-8-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1778464111",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:multicluster_engine:2.9::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "multicluster engine for Kubernetes 2.9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "multicluster-engine/assisted-service-9-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1778464072",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:multicluster_engine:2.9::el9"
    ]
  }
]