{"id":"CVE-2025-11393","sourceIdentifier":"secalert@redhat.com","published":"2025-12-15T17:15:51.870","lastModified":"2026-10-07T19:10:00.160","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in runtimes-inventory-rhel8-operator. An internal proxy component is incorrectly configured. Because of this flaw, the proxy attaches the cluster's main administrative credentials to any command it receives, instead of only the specific reports it is supposed to handle.\n\nThis allows a standard user within the cluster to send unauthorized commands to the management platform, effectively acting with the full permissions of the cluster administrator. This could lead to unauthorized changes to the cluster's configuration or status on the Red Hat platform."},{"lang":"es","value":"Se encontró un fallo en runtimes-inventory-rhel8-operator. Un componente de proxy interno está configurado incorrectamente. Debido a este fallo, el proxy adjunta las credenciales administrativas principales del clúster a cualquier comando que recibe, en lugar de solo los informes específicos que se supone que debe manejar.\n\nEsto permite a un usuario estándar dentro del clúster enviar comandos no autorizados a la plataforma de gestión, actuando efectivamente con los permisos completos del administrador del clúster. Esto podría conducir a cambios no autorizados en la configuración o el estado del clúster en la plataforma Red Hat."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"Red Hat","product":"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator","cpes":["cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"],"versions":[{"version":"1.0.0-1765483112","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Runtimes Inventory Operator","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"insights-runtimes-tech-preview/runtimes-inventory-rhel8-operator","cpes":["cpe:/a:redhat:insights-runtimes:1"]}]}],"metrics":{"cvssMetricV31":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":5.8}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-15T18:06:14.762878Z","id":"CVE-2025-11393","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-441"}]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2025:23236","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2025-11393","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402032","source":"secalert@redhat.com"}]}