https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 17:19:04 +0000 https://cve.radiocsirt.org/vuln/cve-2025-25209 <p><strong>Affected:</strong> rhcl-operator-container, Red Hat Connectivity Link 1</p> <p>The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those secretes are already in the kuadrant-system instead of copying it to the referred namespace. This creates space for a malicious actor with a developer persona access to leak those secrets over HTTP connection, as long the attacker knows the name of the targeted secrets and those secrets are limited to one line only.</p> <p><strong>Affected:</strong> rhcl-operator-container, Red Hat Connectivity Link 1</p> <p>The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those secretes are already in the kuadrant-system instead of copying it to the referred namespace. This creates space for a malicious actor with a developer persona access to leak those secrets over HTTP connection, as long the attacker knows the name of the targeted secrets and those secrets are limited to one line only.</p> https://cve.radiocsirt.org/vuln/cve-2025-25209