THREAT OPS › Threat News › [NVD] CVE-2025-11393 (HIGH 8.7) — A flaw was found in runtimes-inventory-rhel8-operator. An internal proxy component is incorrectly configured. Because of this flaw, the proxy attaches the cluster's main administrative credentials to any command it receives, instead of only the specific reports it is supposed to
[NVD] CVE-2025-11393 (HIGH 8.7) — A flaw was found in runtimes-inventory-rhel8-operator. An internal proxy component is incorrectly configured. Because of this flaw, the proxy attaches the cluster's main administrative credentials to any command it receives, instead of only the specific reports it is supposed to
CVE-2025-11393 CVSS: 8.7 HIGH Published: 2025-12-15T17:15:51.870
A flaw was found in runtimes-inventory-rhel8-operator. An internal proxy component is incorrectly configured. Because of this flaw, the proxy attaches the cluster's main administrative credentials to any command it receives, instead of only the specific reports it is supposed to handle.
This allows a standard user within the cluste
MITRE ATT&CK techniques
Indicators of compromise
- CVE-2025-11393cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-11393