RHBA-2025:11623MediumCVSS 5.5
Red Hat Bug Fix Advisory: Red Hat Advanced Cluster Management 2.12.4 bug fixes and container updates
🔗 CVE IDs covered (1)
📋 Description
CVE-2025-6017 — rhacm: Users with ClusterReader Role can see credentials from Managed-clusters
🎯 Affected products184
- Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-cli-rhel9@sha256:4c35e5e8593fd0abf06f06962367453abc65350ba6be5b005fb6d984d4de3b8f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-cli-rhel9@sha256:82146302a6e7f9a0ca96f12d9c64a7d2b26d64d8fcc581254e0a56db52bfef4f_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-cli-rhel9@sha256:8aeb69882efe0ed14fcad5e3cf5b11176282ea45ebb06188fb6182a1b312df6d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-cli-rhel9@sha256:9dcc5bc4b597f461202f037732b791b73db9ae070f723048247f6274d2c35841_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-cluster-permission-rhel9@sha256:2774017f70827cfda73f7563eb1bea7ba714b9121b0a0304a70266a161b6ca20_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-cluster-permission-rhel9@sha256:339c9244357377fd7d6024c816a2722c6a15361a25372962f7c552a94a29ae3b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-cluster-permission-rhel9@sha256:8a7f035ba3629131e2a5bca836a57f926c6e770a40449e7c68a11ab691612186_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-cluster-permission-rhel9@sha256:cb531b09f55acd7ae19a71b4aedb1fdf65c1b75f66158528af527260d3df6ce7_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38434e353691b0bf3ee094723b96ec74cc5fb061f70d979b5d60c64b948b2928_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:55be0d233528a056fcf09939ef733a14676ce7eff963ea7992515e1188c60cf7_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:5edea842e7305b11cecdd8a8e0fe216c30bcffcc4a4a810c14f03fdcdcf959dc_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:9077491654fe85444fa7b9ef738fd42b8ec1b020b90946a8752c75f078fd5ba7_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:82647dc30f25796a426241a493e376ff39dc074ec2cc4afc7bbbdf10b7527688_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:b4a909ce1a24e532f6b03916498e624e3290d14b5a3e1128bc0fec29104cd4c6_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d10fc45071eeb6ad2b4707e54785371945d4b4784c03a64e037db8e990cb02a4_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:efaee39541baf90aa548a68309b8a672c121111f2bace5932dacdd210fc7a245_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-grafana-rhel9@sha256:09c3b3358c83c271b7da94fc1d7f1cdc450aa130be63afb45d7bbe026b5b798a_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-grafana-rhel9@sha256:1f90e56086b27081efd97b5319da2a5b837031b373e2890ab9f86c085f6758c8_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-grafana-rhel9@sha256:96d3d67482c79926773d0e9907382fac778f04f5242fc03c9f057b9f08e3b5b0_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-grafana-rhel9@sha256:d0298d87a358a2c0d772e0d168b5a84b730c44b18dfe9ff34296a4139df4d076_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-multicluster-observability-addon-rhel9@sha256:49d5850a5c9470400067978f2a18c3f67a06c35db36c3e989b23f72e69652114_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-multicluster-observability-addon-rhel9@sha256:6183bd89fe5466e4447bc70416f3adc267c00cd8a34265c3be28af793ea0d5c5_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-multicluster-observability-addon-rhel9@sha256:c8bd2a8796db45131a9de44fd4159cc6ee3728998c91aa53c99a26a935a691f1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-multicluster-observability-addon-rhel9@sha256:caaa074e1a1c7baf7fb69371852d0890fd9f8f163984695da0ad873faa7cac28_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-must-gather-rhel9@sha256:55ab1b9632bce0f2ae5eab57a618b6e5c5feae6f2d75db3af68c6c8c8c82a374_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-must-gather-rhel9@sha256:a5d9ab4c1c866e0969672dac0ea24d48d0f43e33b59c9fa53b83b749f5aac1e9_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-must-gather-rhel9@sha256:f151961411f30ab0186e8b6c71102144fec644d92bd7f566efd311fc6ba9bde2_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-must-gather-rhel9@sha256:f8723b9fef2ad7236ae8f8631272dcee5291f0bdde504f41a85d013222ace2f4_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- rhacm2/acm-operator-bundle@sha256:1ed15f974d371c1ede536ad85552fd64a5b2a5987dc35969b260a46daf09a16a_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
- +154 more not shown
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to the following article: https://access.redhat.com/articles/11258