Threats tagged 'ghsa-6rhq-p65w-3v27'

CVE-2026-117681 is a vulnerability in konflux-ci where the user interface proxy disables TLS certificate verification for internal backend service connections in environments without a default service certificate authority. This allows an adjacent network attacker who can intercept traffic to capture a cluster-scoped authentication token with user impersonation rights, potentially leading to full administrative control of the cluster. The issue primarily affects non-OpenShift Kubernetes clusters lacking the platform's automatic service CA. Red Hat classifies this vulnerability as important but notes that standard OpenShift environments are not impacted due to enforced TLS verification.