CVE-2025-25002

Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjacent network...

CVE-2025-26628

Insufficiently protected credentials in Azure Local Cluster allows an authorized attacker to disclose information locally...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: openbao-k8s, snyk-cli, scorecard, terraform-provider-kubernetes, haproxy-ingress, rabbitmq-messaging-topology-operator, spire-server, temporal-server, kube-bench, zot, sriov-network-device-plugin, spire-controller-manager, nodetaint, go-licenses, nri-elasticsearch,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: openbao-k8s, snyk-cli, scorecard, terraform-provider-kubernetes, haproxy-ingress, rabbitmq-messaging-topology-operator, spire-server, temporal-server, kube-bench, zot, sriov-network-device-plugin, spire-controller-manager, nodetaint, go-licenses, nri-elasticsearch,...

The vulnerability of the Kubernetes cluster deployment and management software on Azure Local Cluster infrastructure lies in the exposure of password values in log files, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Kubernetes cluster deployment and management software on Azure Local Cluster infrastructure is related to the disclosure of password values in log files. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information from ...

The vulnerability of the Kubernetes cluster deployment and management software on Azure Local Cluster infrastructure lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Kubernetes cluster deployment and management software on Azure Local Cluster infrastructure is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.13.2 container image updates

Red Hat Advanced Cluster Management for Kubernetes 2.13.2 General Availability release, with updates to container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure products. A malicious person could exploit the vulnerabilities to grant themselves elevated privileges and gain access to sensitive data. The vulnerability with reference CVE-2025-27489 allows the malicious party, by loading a non-Microsoft DLL...

CVE-2025-26628

Insufficiently protected credentials in Azure Local Cluster allows an authorized attacker to disclose information locally...

CVE-2025-25002

Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjacent network...

CVE-2025-25002

Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjacent network...

CVE-2025-26628

Insufficiently protected credentials in Azure Local Cluster allows an authorized attacker to disclose information locally...

CVE-2025-26628

Technical details about CVE-2025-26628 are not publicly provided in the connected documents; no specific affected product versions, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2025-26628 Azure Local Cluster Information Disclosure Vulnerability

...

CVE-2025-25002

CVE-2025-25002 affects Azure Local Cluster and involves insertion of sensitive information into log files, enabling an authorized attacker to disclose data over an adjacent network. The connected documents confirm the Azure Local Cluster as the vulnerable component and describe the impact as data...

CVE-2025-25002 Azure Local Cluster Information Disclosure Vulnerability

...

Azure Local Cluster Information Disclosure Vulnerability

Insufficiently protected credentials in Azure Local Cluster allows an authorized attacker to disclose information locally...

Azure Local Cluster Information Disclosure Vulnerability

Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjacent network...

PT-2025-15491 · Microsoft · Azure Local Cluster

Name of the Vulnerable Software and Affected Versions: Azure Local Cluster affected versions not specified Description: The issue allows an authorized attacker to disclose sensitive information over an adjacent network by inserting it into a log file in an Azure Local Cluster. This can potentiall...

The vulnerability of Kubernets Rancher cluster management software, related to deficiencies in access control, allows a hacker to change administrator passwords and gain access to their accounts.

The vulnerability of Kubernets Rancher cluster management software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to change administrator passwords and gain access to their accounts...