Threats tagged 'ghsa-q5c4-r3vh-f379'

A vulnerability in the multicluster-global-hub manager component allows improper validation of the source identity of incoming CloudEvents on Kafka status topics. An attacker who has compromised a managed hub and obtained its Kafka client certificate can manipulate the source identity to falsify or delete critical data such as compliance, inventory, and cluster health information belonging to other hubs. This flaw has a high severity rating with a CVSS score of 8.5. Red Hat has released security advisories with updated versions addressing this issue.