CVE-2025-2241 Hive: exposure of vcenter credentials via clusterprovision in hive / mce / acm

A flaw was found in Hive, a component of Multicluster Engine MCE and Advanced Cluster Management ACM. This vulnerability causes VCenter credentials to be exposed in the ClusterProvision object after provisioning a VSphere cluster. Users with read access to ClusterProvision objects can extract...

CVE-2023-32191

When RKE provisions a cluster, it stores the cluster state in a configmap called full-cluster-state inside the kube-system namespace of the cluster itself. The information available in there allows non-admin users to escalate to admin...

Update Rollup 2 for System Center 2019 Virtual Machine Manager

Update Rollup 2 for System Center 2019 Virtual Machine Manager Introduction This article describes the issues that are fixed in System Center Virtual Machine Manager 2019 UR2 release. There are two updates that are available for Virtual Machine Manager, one for the Virtual Machine Manager server...