4 matches found
CVE-2026-62284
OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the console-proxy RemoteConfigResolver parses Kubernetes Secret kubeconfig data with clientcmd.RESTConfigFromKubeConfig without sanitizing the resulting rest.Config. An attacker who can create or modify a Secr...
CVE-2026-62284 OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy
OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the console-proxy RemoteConfigResolver parses Kubernetes Secret kubeconfig data with clientcmd.RESTConfigFromKubeConfig without sanitizing the resulting rest.Config. An attacker who can create or modify a Secr...
CVE-2026-62284
The OSAC operator (Kubernetes operator) is vulnerable in revision 8220502 due to improper sanitization of rest.Config when the console-proxy RemoteConfigResolver parses Kubernetes Secret kubeconfig data. An attacker with permissions to create or modify a Secret labeled osac.openshift.io/remote-cl...
CVE-2026-62284: osac-project osac-operator: OSAC operator is a Kubernetes operator
OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the console-proxy RemoteConfigResolver parses Kubernetes Secret kubeconfig data with clientcmd.RESTConfigFromKubeConfig without sanitizing the resulting rest.Config. An attacker who can create or modify a Secr...