VDB

CVE-2026-75485

CVE-2026-75485 PUBLISHED CVSS 5.5 MEDIUM

Reported by redhat · Published August 18, 2026

A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. The cluster Proxy object is dumped in raw form, bypassing the oc inspect redaction that would normally sanitize sensitive fields. This exposes proxy basic-auth credentials in the must-gather archive, potentially disclosing sensitive authentication information to anyone with access to the archive.

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.111787263322
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.131787260453
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.141787189811
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.151787238730
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.161787234748
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171787228698
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.161787234748, 1787234748, 1787234748
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.111787263322, 1787263322, 1787263322
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.141787189811, 1787189811, 1787189811
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.131787260453, 1787260453, 1787260453
Red HatRed Hat Advanced Cluster Management for Kubernetes 2
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.171787228698, 1787228698, 1787228698
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.151787238730, 1787238730, 1787238730

Timeline

  • Aug 18, 2026 Coalition ESS Score
  • Aug 18, 2026 CVE Published
  • Aug 20, 2026 CVE Updated
  • Aug 24, 2026 EPSS Score
  • Aug 27, 2026 EPSS Score
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Distribution Patch
  • Sep 6, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›