CVE-2025-5417
Last modified
CVE-2025-5417 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container image and modify the image's content. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container image and modify the image's content. This issue affects the confidentiality and integrity of the data, and any changes made are not permanent, as they reset after the pod restarts.
Metrics
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-5417?
How severe is CVE-2025-5417?
How do I fix CVE-2025-5417?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-54164An out-of-bounds read vulnerability has been reported to aff…4.9
- CVE-2025-54165An out-of-bounds read vulnerability has been reported to aff…4.9
- CVE-2025-54166An out-of-bounds read vulnerability has been reported to aff…4.9
- CVE-2025-54167A cross-site scripting (XSS) vulnerability has been reported…7.2
- CVE-2025-54168A cross-site scripting (XSS) vulnerability has been reported…4.8
- CVE-2025-54169An out-of-bounds read vulnerability has been reported to aff…6.5
- CVE-2025-54170An out-of-bounds read vulnerability has been reported to aff…6.5
- CVE-2025-54172QuickCMS is vulnerable to Stored XSS in sTitle parameter in …4.8
- CVE-2025-54174QuickCMS is vulnerable to Cross-Site Request Forgery in arti…4.3
- CVE-2025-54175QuickCMS.EXT is vulnerable to Reflected XSS in sFileName par…6.1
- CVE-2025-54186Substance3D - Modeler versions 1.22.0 and earlier are affect…5.5
- CVE-2025-54187Substance3D - Painter versions 11.0.2 and earlier are affect…7.8
Are you affected by CVE-2025-5417?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST