Threats tagged 'ghsa-wg82-w434-qwgq'

A vulnerability in Red Hat Advanced Cluster Management for Kubernetes (acm-search-v2-api-rhel9) allows unauthorized access to remote managed hub search results. The flaw occurs because the getFederationConfig function improperly reuses a user's bearer token for all subsequent federated requests until the cache expires, leading to information disclosure among authenticated users.