Lucene search
PRIOn knowledge basePRION:CVE-2020-25655HistoryNov 09, 2020 - 3:15 p.m.
Code injection
2020-11-0915:15:00
PRIOn knowledge base
www.prio-n.com
4
An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct permissions. Views created for an admin user would be made available for a short time to users with only view permission. In this short time window the user with view permission could read cluster secrets that should only be disclosed to admin users.
| CPE | Name | Operator | Version |
|---|---|---|---|
| advanced_cluster_management_for_kubernetes | eq | 2.0 |
Related
cve
cve
CVE-2020-25655
2020-11-09 15:15:12
redhatcve
redhatcve
CVE-2020-25655
2020-10-22 00:03:44
nvd
nvd
CVE-2020-25655
2020-11-09 15:15:12
cvelist
cvelist
CVE-2020-25655
2020-11-09 14:38:34
redhat
redhat