RHBA-2025:9225MediumCVSS 5.5

Red Hat Bug Fix Advisory: Red Hat Advanced Cluster Management 2.11.7 - hotfix

Published
June 17, 2025
Last Modified
October 30, 2026

🔗 CVE IDs covered (1)

CVE-2025-6017 →

📋 Description

CVE-2025-6017 — rhacm: Users with ClusterReader Role can see credentials from Managed-clusters

🎯 Affected products5

  • Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/multicluster-operators-subscription-rhel9@sha256:09809bd50e04e821885e42aadddf03c6330dcdfc985eba8a747f414b10a4b5a9_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/multicluster-operators-subscription-rhel9@sha256:3584f8a6c48f8fd431516002d337d7c0fcf4b07b76101466bd8143ef521ae280_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/multicluster-operators-subscription-rhel9@sha256:cdee9ded03dd2c4f7b5afdbec8df64750c8e4f10f4f355ba8f15367e49142b37_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/multicluster-operators-subscription-rhel9@sha256:e520d0337c22196b7d46f6d6964085a302e60dc28d31b55e9b5170ca527bce36_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied.

🔗 References (2)