漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Hive: exposure of vcenter credentials via clusterprovision in hive / mce / acm
Vulnerability Description
A flaw was found in Hive, a component of Multicluster Engine (MCE) and Advanced Cluster Management (ACM). This vulnerability causes VCenter credentials to be exposed in the ClusterProvision object after provisioning a VSphere cluster. Users with read access to ClusterProvision objects can extract sensitive credentials even if they do not have direct access to Kubernetes Secrets. This issue can lead to unauthorized VCenter access, cluster management, and privilege escalation.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Vulnerability Type
敏感信息的不安全存储
Vulnerability Title
Red Hat Advanced Cluster Management和Red Hat Multicluster Engine 安全漏洞
Vulnerability Description
Red Hat Advanced Cluster Management和Red Hat Multicluster Engine都是美国红帽（Red Hat）公司的产品。Red Hat Advanced Cluster Management是一个控制台集群控制软件。Red Hat Multicluster Engine是一个多集群引擎。 Red Hat Advanced Cluster Management和Red Hat Multicluster Engine存在安全漏洞，该漏洞源于VCenter凭据在C
CVSS Information
N/A
Vulnerability Type
N/A