CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.7. See the original NVD description below for full technical details.
CVE
CVE-2025-25209
Severity
MEDIUM
CVSS
5.7
EPSS
0.19%
Original NVD Description
The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those secretes are already in the kuadrant-system instead of copying it to the referred namespace. This creates space for a malicious actor with a developer persona access to leak those secrets over HTTP connection, as long the attacker knows the name of the targeted secrets and those secrets are limited to one line only.