漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Rhacm: open cluster management (ocm): cross-cluster privilege escalation via improper kubernetes client certificate renewal validation
Vulnerability Description
A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Improper validation of Kubernetes client certificate renewal allows a managed cluster administrator to forge a client certificate that can be approved by the OCM controller. This enables cross-cluster privilege escalation and may allow an attacker to gain control over other managed clusters, including the hub cluster.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
证书验证不恰当
Vulnerability Title
Red Hat rhacm2 信任管理问题漏洞
Vulnerability Description
Red Hat rhacm2是美国红帽（Red Hat）公司的一个库。 Red Hat rhacm2存在信任管理问题漏洞，该漏洞源于Kubernetes客户端证书续订验证不当，可能导致受管集群管理员伪造可被OCM控制器批准的客户端证书，从而实现跨集群权限提升并控制其他受管集群。
CVSS Information
N/A
Vulnerability Type
N/A