Hoch 7.7Linux-Server
CVE-2026-93017
The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or…
The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref: https://github.com/openshift/insights-operator/blob/8f15e3157ff09f54ab22801f5b21da35a195cc6d/manifests/03-clusterrole.yaml#L368-L373 ``` - apiGroups: - "" resources: - secrets verbs: - get - list ``` By spawning a pod with the…
8. Okt 2026
Original bei Red Hat öffnenAusgewertete Quellen
- Red Hathttps://access.redhat.com/errata/RHSA-2026:82785
- Red Hathttps://access.redhat.com/errata/RHSA-2026:82813
- Red Hathttps://access.redhat.com/errata/RHSA-2026:83480
- Red Hathttps://access.redhat.com/errata/RHSA-2026:83502
- Red Hathttps://access.redhat.com/errata/RHSA-2026:83702
- Red Hathttps://access.redhat.com/errata/RHSA-2026:89198
- Red Hathttps://access.redhat.com/errata/RHSA-2026:89715
- Red Hathttps://access.redhat.com/errata/RHSA-2026:89726
- Red Hathttps://access.redhat.com/errata/RHSA-2026:90274
- Red Hathttps://access.redhat.com/errata/RHSA-2026:95746
- Red Hathttps://access.redhat.com/errata/RHSA-2026:96283
- Red Hathttps://access.redhat.com/security/cve/CVE-2026-93017
- Red Hathttps://bugzilla.redhat.com/show_bug.cgi?id=2515741
- NVDCVE-2026-93017