The vulnerability exists in the acm-search-v2-api-rhel9 component of Red Hat Advanced Cluster Management for Kubernetes 2.11. When the getFederationConfig function refreshes its cache, it reuses a user's bearer token for all subsequent federated requests until the cache expires. This token reuse across different user requests leads to unauthorized access to remote managed hub search results, resulting in information disclosure. Exploitation requires the FEATURE_FEDERATED_SEARCH feature to be enabled, which is disabled by default. The issue is classified under CWE-266 (Incorrect Privilege Assignment).

This vulnerability allows authenticated users to gain unauthorized access to search results from remote managed hubs, leading to information disclosure. The impact is limited to confidentiality, with no integrity or availability impact. The vulnerability requires low privileges to exploit but has a high attack complexity due to the need for the FEATURE_FEDERATED_SEARCH to be enabled.

Red Hat advises ensuring that the FEATURE_FEDERATED_SEARCH is not enabled if federated search functionality is not required, as it is disabled by default. If this feature is enabled, consider disabling it to prevent unauthorized cross-user data access. Disabling this feature will impact the ability to perform federated searches across managed hubs. There is no mention of an official patch or fix in the advisory, so patch status is not yet confirmed — check the vendor advisory for current remediation guidance.