openshift5/ose-cloud-credential-rhel9-operator vulnerabilities

CVEs whose affected-version data names the openshift5/ose-cloud-credential-rhel9-operator package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-10843High· 7.2

5mo ago

Cloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide iam access beyond cluster scope on aws

A flaw was found in the OpenShift Cloud Credential Operator Mint-mode IAM policies for AWS. Operator credentials are provisioned with account-wide scope for destructive actions rather than being restricted to cluster-owned resources, ena…

▾ TwilightRed Hat · openshift4/ose-cloud-credential-operatorEPSS 0.33%via CVEORG