CVE-2025-25209

Rhcl: sharedsecretref can be used to leak secrets severity

Severity Score

5.7

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those secretes are already in the kuadrant-system instead of copying it to the referred namespace. This creates space for a malicious actor with a developer persona access to leak those secrets over HTTP connection, as long the attacker knows the name of the targeted secrets and those secrets are limited to one line only.

Los metadatos de AuthPolicy en Red Hat Connectivity Link contienen un objeto que almacena secretos; sin embargo, asume que estos ya están en el sistema kuadrant en lugar de copiarlos al espacio de nombres de referencia. Esto crea un espacio para que un actor malicioso con acceso de desarrollador filtre dichos secretos mediante una conexión HTTP, siempre que el atacante conozca el nombre de los secretos objetivo y estos se limiten a una sola línea.

*Credits: N/A

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

Low

Attack Vector

Adjacent

Attack Complexity

Low

Authentication

Multiple

Confidentiality

Complete

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2025-02-03 CVE Reserved
2025-06-09 CVE Published
2025-06-09 CVE Updated
2025-07-11 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CAPEC

References (2)

URL	Tag	Source
https://access.redhat.com/security/cve/CVE-2025-25209	Vdb Entry
https://bugzilla.redhat.com/show_bug.cgi?id=2347438	Issue Tracking

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Redhat Search vendor "Redhat"		Connectivity Link Search vendor "Redhat" for product "Connectivity Link"				*		-		Affected