Threats tagged 'ghsa-37c6-v768-8x6w'

A vulnerability in multicloud-operators-subscription allows a privileged namespace administrator to disclose sensitive information by manipulating the Channel.Spec.SecretRef.Namespace field. This flaw enables copying secret contents from other namespaces into the attacker's namespace, leading to information disclosure. The issue affects Red Hat Advanced Cluster Management for Kubernetes and has a CVSS score of 7.7 (high severity).