Threats tagged 'ghsa-cjw2-r57r-pwvf'

A vulnerability in the multicloud-integrations component of Red Hat Advanced Cluster Management (RHACM) allows an authenticated tenant user to manipulate the GitOpsCluster controller. This manipulation enables the tenant to redirect sensitive spoke cluster bearer tokens to a namespace they control, potentially disclosing critical information and bypassing security policies within ArgoCD AppProjects. The flaw has a high severity with a CVSS score of 9.6.