CVE-2020-25655

The CVE-2020-25655 issue affects the ManagedClusterView API, enabling a temporary exposure window where admin-created views can be read by users with view permissions, risking disclosure of cluster secrets. Public sources in the connected documents describe an RBAC bypass that could disclose secr...