Information disclosure in Baremetal Operator - CVE-2025-29781
Published: March 25, 2025
Vulnerability identifier: #VU106015
CSH Severity: Low
CVSS v4: 6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N]
CVE-ID: CVE-2025-29781
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to the Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD. A local user can gain unauthorized access to sensitive information on the system.
Affected software
Baremetal Operator
Financial Transaction Manager
Red Hat OpenShift Container Platform
Financial Transaction Manager
Red Hat OpenShift Container Platform
How to mitigate CVE-2025-29781
Install updates from vendor's website.
Baremetal Operator - addressed in versions 0.8.1, 0.9.1
Financial Transaction Manager - addressed in versions 3.2.13 iFix4, 4.0.6.0 iFix5, 4.0.7.0
Red Hat OpenShift Container Platform - addressed in versions 4.12.76, 4.13.58, 4.14.51, 4.15.50, 4.16.39, 4.17.25, 4.18.9, 4.19.0
Financial Transaction Manager - addressed in versions 3.2.13 iFix4, 4.0.6.0 iFix5, 4.0.7.0
Red Hat OpenShift Container Platform - addressed in versions 4.12.76, 4.13.58, 4.14.51, 4.15.50, 4.16.39, 4.17.25, 4.18.9, 4.19.0
External References
- https://github.com/metal3-io/baremetal-operator/commit/19f8443b1fe182f76dd81b43122e8dd102f8b94c
- https://github.com/metal3-io/baremetal-operator/pull/2321
- https://github.com/metal3-io/baremetal-operator/pull/2322
- https://github.com/metal3-io/baremetal-operator/security/advisories/GHSA-c98h-7hp9-v9hq
- https://github.com/metal3-io/metal3-docs/blob/main/design/baremetal-operator/bmc-events.md
Related Security Bulletins
- Information disclosure in Baremetal Operator
- Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.18
- Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
- Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
- Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
- Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
- Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
- Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
- Multiple vulnerabilities in IBM Financial Transaction Manager (FTM) for RedHat OpenShift
- Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.19