Skip to content
Threat Feed
Subscribe

Product

Advanced Cluster Management for Kubernetes

2 briefs RSS
high advisory

Red Hat Advanced Cluster Management Lighthouse Component DNS Hijacking

A vulnerability in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes allows a compromised spoke cluster to perform Man-in-the-Middle attacks via malicious EndpointSlice advertisements.

Advanced Cluster Management for Kubernetes kubernetes vulnerability cloud-native cve
2t 1c
critical advisory

Privilege Escalation in Red Hat Advanced Cluster Management

An insecure configuration in the Red Hat Advanced Cluster Management Application Subscription controller allows users with namespace-scoped edit privileges to escalate to cluster-admin by deploying unauthorized cluster-scoped resources via Helm charts.

Advanced Cluster Management for Kubernetes +1 privilege-escalation kubernetes cve vulnerability cloud credential-access
2t 2c updated