Hive: exposure of vcenter credentials via clusterprovision in hive / mce / acm
A flaw was found in Hive, a component of Multicluster Engine (MCE) and Advanced Cluster Management (ACM). This vulnerability causes VCenter credentials to be exposed in the ClusterProvision object after provisioning a VSphere cluster. Users with read access to ClusterProvision objects can extract sensitive credentials even if they do not have direct access to Kubernetes Secrets. This issue can lead to unauthorized VCenter access, cluster management, and privilege escalation.
Affected products
- =<1.1.16
Matching in nixpkgs
pkgs.archiver
Easily create & extract archives, and compress & decompress files of various formats
-
nixos-unstable -
- nixpkgs-unstable 3.5.1
pkgs.hivemind
Process manager for Procfile-based applications
-
nixos-unstable -
- nixpkgs-unstable 1.1.0
pkgs.zarchive
File archive format supporting random-access reads
-
nixos-unstable -
- nixpkgs-unstable 0.1.2
pkgs.xarchiver
GTK frontend to 7z,zip,rar,tar,bzip2, gzip,arj, lha, rpm and deb (open and extract only)
-
nixos-unstable -
- nixpkgs-unstable 0.5.4.26
pkgs.disarchive
Disassemble software into data and metadata
-
nixos-unstable -
- nixpkgs-unstable 0.5.0
pkgs.fsarchiver
File system archiver for linux
-
nixos-unstable -
- nixpkgs-unstable 0.8.8
pkgs.tg-archive
Tool for exporting Telegram group chats into static websites like mailing list archives
-
nixos-unstable -
- nixpkgs-unstable 1.3.0
pkgs.archivemount
Gateway between FUSE and libarchive: allows mounting of cpio, .tar.gz, .tar.bz2 archives
-
nixos-unstable -
- nixpkgs-unstable 1b
pkgs.fuse-archive
Serve an archive or a compressed file as a read-only FUSE file system
-
nixos-unstable -
- nixpkgs-unstable 1.10
pkgs.jpeg-archive
Utilities for archiving photos for saving to long term storage or serving over the web
-
nixos-unstable -
- nixpkgs-unstable 2.2.0
pkgs.web-archives
Web archives reader offering the ability to browse offline millions of articles
-
nixos-unstable -
- nixpkgs-unstable 0.5.0
pkgs.hivelytracker
Chip music tracker based upon the AHX format
-
nixos-unstable -
- nixpkgs-unstable 1.9
pkgs.lparchive2epub
Transform any LP from lparchive into an epub document
-
nixos-unstable -
- nixpkgs-unstable 1.3.2
pkgs.the-unarchiver
Unpacks archive files
-
nixos-unstable -
- nixpkgs-unstable 4.3.9
pkgs.git-archive-all
Archive a repository with all its submodules
-
nixos-unstable -
- nixpkgs-unstable 1.23.1
pkgs.internetarchive
Python and Command-Line Interface to Archive.org
-
nixos-unstable -
- nixpkgs-unstable 5.5.1
pkgs.autoconf-archive
Archive of autoconf m4 macros
-
nixos-unstable -
- nixpkgs-unstable 2024.10.16
pkgs.guile-disarchive
Disassemble software into data and metadata
-
nixos-unstable -
- nixpkgs-unstable 0.5.0
pkgs.mastodon-archive
Utility for backing up your Mastodon content
-
nixos-unstable -
- nixpkgs-unstable 1.4.2
pkgs.mlarchive2maildir
Imports mail from (pipermail) archives into a maildir
-
nixos-unstable -
- nixpkgs-unstable 0.0.9
pkgs.lxqt.lxqt-archiver
Archive tool for the LXQt desktop environment
-
nixos-unstable -
- nixpkgs-unstable 1.2.0
pkgs.libsForQt5.karchive
None
-
nixos-unstable -
- nixpkgs-unstable 5.116.0
pkgs.php81Packages.phive
Phar Installation and Verification Environment (PHIVE)
-
nixos-unstable -
- nixpkgs-unstable 0.16.0
pkgs.php82Packages.phive
Phar Installation and Verification Environment (PHIVE)
-
nixos-unstable -
- nixpkgs-unstable 0.16.0
pkgs.php83Packages.phive
Phar Installation and Verification Environment (PHIVE)
-
nixos-unstable -
- nixpkgs-unstable 0.16.0
pkgs.php84Packages.phive
Phar Installation and Verification Environment (PHIVE)
-
nixos-unstable -
- nixpkgs-unstable 0.16.0
pkgs.kdePackages.karchive
Qt addon providing access to numerous types of archives
-
nixos-unstable -
- nixpkgs-unstable 6.18.0
pkgs.CuboCore.corearchiver
Archiver from the C Suite to create and extract archives
-
nixos-unstable -
- nixpkgs-unstable 5.0.0
pkgs.stripJavaArchivesHook
None
pkgs.canonicalize-jars-hook
None
pkgs.perlPackages.ArchiveTar
Manipulates TAR archives
-
nixos-unstable -
- nixpkgs-unstable 3.02
pkgs.perlPackages.ArchiveCpio
Module for manipulations of cpio archives
-
nixos-unstable -
- nixpkgs-unstable 0.10
pkgs.plasma5Packages.karchive
None
-
nixos-unstable -
- nixpkgs-unstable 5.116.0
pkgs.wayback-machine-archiver
Python script to submit web pages to the Wayback Machine for archiving
-
nixos-unstable -
- nixpkgs-unstable 1.9.1
pkgs.kodiPackages.archive_tool
Set of common python functions to work with the Kodi archive virtual file system (vfs) binary addons
-
nixos-unstable -
- nixpkgs-unstable 2.0.3
pkgs.perl538Packages.ArchiveTar
Manipulates TAR archives
-
nixos-unstable -
- nixpkgs-unstable 3.02
pkgs.perl540Packages.ArchiveTar
Manipulates TAR archives
-
nixos-unstable -
- nixpkgs-unstable 3.02
pkgs.xfce.thunar-archive-plugin
Thunar plugin providing file context menus for archives
-
nixos-unstable -
- nixpkgs-unstable 0.6.0
pkgs.haskellPackages.archive-sig
Backpack signature for archive libraries
-
nixos-unstable -
- nixpkgs-unstable 1.0.2.0
pkgs.haskellPackages.archive-tar
Common interface using the tar package
-
nixos-unstable -
- nixpkgs-unstable 1.0.0.0
pkgs.haskellPackages.zip-archive
Library for creating and modifying zip archives
-
nixos-unstable -
- nixpkgs-unstable 0.4.3.2
pkgs.perl538Packages.ArchiveCpio
Module for manipulations of cpio archives
-
nixos-unstable -
- nixpkgs-unstable 0.10
pkgs.perl540Packages.ArchiveCpio
Module for manipulations of cpio archives
-
nixos-unstable -
- nixpkgs-unstable 0.10
pkgs.perlPackages.ArchiveAnyLite
Simple CPAN package extractor
-
nixos-unstable -
- nixpkgs-unstable 0.11
pkgs.perlPackages.ArchiveExtract
Generic archive extracting mechanism
-
nixos-unstable -
- nixpkgs-unstable 0.88
pkgs.terraform-providers.archive
None
-
nixos-unstable -
- nixpkgs-unstable 2.7.1
pkgs.perlPackages.ArchiveZip_1_53
Provide an interface to ZIP archive files
-
nixos-unstable -
- nixpkgs-unstable 1.68
pkgs.rubyPackages.jekyll-archives
None
-
nixos-unstable -
- nixpkgs-unstable 2.3.0
pkgs.perl538Packages.ArchiveAnyLite
Simple CPAN package extractor
-
nixos-unstable -
- nixpkgs-unstable 0.11
pkgs.perl538Packages.ArchiveExtract
Generic archive extracting mechanism
-
nixos-unstable -
- nixpkgs-unstable 0.88
pkgs.perl540Packages.ArchiveAnyLite
Simple CPAN package extractor
-
nixos-unstable -
- nixpkgs-unstable 0.11
pkgs.perl540Packages.ArchiveExtract
Generic archive extracting mechanism
-
nixos-unstable -
- nixpkgs-unstable 0.88
pkgs.perlPackages.ArchiveTarWrapper
API wrapper around the 'tar' utility
-
nixos-unstable -
- nixpkgs-unstable 0.38
pkgs.perl538Packages.ArchiveZip_1_53
Provide an interface to ZIP archive files
-
nixos-unstable -
- nixpkgs-unstable 1.68
pkgs.perl540Packages.ArchiveZip_1_53
Provide an interface to ZIP archive files
-
nixos-unstable -
- nixpkgs-unstable 1.68
pkgs.perlPackages.NetCoverArtArchive
Query the coverartarchive.org
-
nixos-unstable -
- nixpkgs-unstable 1.02
pkgs.python312Packages.craft-archives
Library for handling archives/repositories in Canonical craft applications
-
nixos-unstable -
- nixpkgs-unstable 2.2.0
pkgs.python312Packages.handy-archives
Some handy archive helpers for Python
-
nixos-unstable -
- nixpkgs-unstable 0.2.0
pkgs.python313Packages.craft-archives
Library for handling archives/repositories in Canonical craft applications
-
nixos-unstable -
- nixpkgs-unstable 2.2.0
pkgs.python313Packages.handy-archives
Some handy archive helpers for Python
-
nixos-unstable -
- nixpkgs-unstable 0.2.0
pkgs.rubyPackages_3_1.jekyll-archives
None
-
nixos-unstable -
- nixpkgs-unstable 2.3.0
pkgs.rubyPackages_3_2.jekyll-archives
None
-
nixos-unstable -
- nixpkgs-unstable 2.3.0
pkgs.rubyPackages_3_3.jekyll-archives
None
-
nixos-unstable -
- nixpkgs-unstable 2.3.0
pkgs.rubyPackages_3_4.jekyll-archives
None
-
nixos-unstable -
- nixpkgs-unstable 2.3.0
pkgs.perl538Packages.ArchiveTarWrapper
API wrapper around the 'tar' utility
-
nixos-unstable -
- nixpkgs-unstable 0.38
pkgs.perl540Packages.ArchiveTarWrapper
API wrapper around the 'tar' utility
-
nixos-unstable -
- nixpkgs-unstable 0.38
pkgs.python312Packages.dissect-archive
Dissect module implementing parsers for various archive and backup formats
-
nixos-unstable -
- nixpkgs-unstable 1.6
pkgs.python312Packages.internetarchive
Python and Command-Line Interface to Archive.org
-
nixos-unstable -
- nixpkgs-unstable 5.5.1
pkgs.python313Packages.dissect-archive
Dissect module implementing parsers for various archive and backup formats
-
nixos-unstable -
- nixpkgs-unstable 1.6
pkgs.python313Packages.internetarchive
Python and Command-Line Interface to Archive.org
-
nixos-unstable -
- nixpkgs-unstable 5.5.1
pkgs.perl538Packages.NetCoverArtArchive
Query the coverartarchive.org
-
nixos-unstable -
- nixpkgs-unstable 1.02
pkgs.perl540Packages.NetCoverArtArchive
Query the coverartarchive.org
-
nixos-unstable -
- nixpkgs-unstable 1.02
pkgs.home-assistant-component-tests.hive
Open source home automation that puts local control and privacy first
-
nixos-unstable -
- nixpkgs-unstable 2025.9.3
pkgs.python312Packages.nskeyedunarchiver
Unserializes plist data into a usable Python dict
-
nixos-unstable -
- nixpkgs-unstable 1.5.2
pkgs.python313Packages.nskeyedunarchiver
Unserializes plist data into a usable Python dict
-
nixos-unstable -
- nixpkgs-unstable 1.5.2
pkgs.python312Packages.pyhive-integration
Python library to interface with the Hive API
-
nixos-unstable -
- nixpkgs-unstable 1.0.2
pkgs.python313Packages.pyhive-integration
Python library to interface with the Hive API
-
nixos-unstable -
- nixpkgs-unstable 1.0.2
pkgs.haskellPackages.amazonka-kinesis-video-archived-media
Amazon Kinesis Video Streams Archived Media SDK
-
nixos-unstable -
- nixpkgs-unstable 2.0
pkgs.python312Packages.mypy-boto3-kinesis-video-archived-media
Type annotations for boto3 kinesis-video-archived-media
-
nixos-unstable -
- nixpkgs-unstable boto3-kinesis-video-archived-media-1.40.17
pkgs.python313Packages.mypy-boto3-kinesis-video-archived-media
Type annotations for boto3 kinesis-video-archived-media
-
nixos-unstable -
- nixpkgs-unstable boto3-kinesis-video-archived-media-1.40.17
pkgs.python312Packages.types-aiobotocore-kinesis-video-archived-media
Type annotations for aiobotocore kinesis-video-archived-media
-
nixos-unstable -
- nixpkgs-unstable 2.23.2
pkgs.python313Packages.types-aiobotocore-kinesis-video-archived-media
Type annotations for aiobotocore kinesis-video-archived-media
-
nixos-unstable -
- nixpkgs-unstable 2.23.2
Package maintainers
-
@kalbasit Wael Nasreddine <wael.nasreddine@gmail.com>
-
@foo-dogsquared Gabriel Arazas <foodogsquared@foodogsquared.one>
-
@nico202 Nicolò Balzarotti <anothersms@gmail.com>
-
@icyrockcom icyrock
-
@fgaz Francesco Gazzetta <fgaz@fgaz.me>
-
@sveitser Mathis Antony <sveitser@gmail.com>
-
@offlinehacker Jaka Hudoklin <jaka@x-truder.net>
-
@dotlambda Robert Schütz <rschuetz17@gmail.com>
-
@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@pyrox0 Pyrox <pyrox@pyrox.dev>
-
@ilya-fedin Ilya Fedin <fedin-ilja2010@ya.ru>
-
@K900 Ilya K. <me@0upti.me>
-
@SuperSandro2000 Sandro Jäckel <sandro.jaeckel@gmail.com>
-
@LunNova Luna Nova <nixpkgs-maintainer@lunnova.dev>
-
@NickCao Nick Cao <nickcao@nichi.co>
-
@ttuegel Thomas Tuegel <ttuegel@mailbox.org>
-
@mjm Matt Moriarity <matt@mattmoriarity.com>
-
@dschrempf Dominik Schrempf <dominik.schrempf@gmail.com>
-
@cpages Carles Pagès <page@ruiec.cat>
-
@minijackson Rémi Nicole <minijackson@riseup.net>
-
@edwtjo Edward Tjörnhammar <ed@cflags.cc>
-
@peterhoeg Peter Hoeg <peter@hoeg.com>
-
@nvmd Sergey Kazenyuk <kazenyuk@pm.me>
-
@aanderse Aaron Andersen <aaron@fosslib.net>
-
@jcumming Jack Cummings <jack@mudshark.org>
-
@nyanloutre Paul Trehiou <paul@nyanlout.re>
-
@peeley Noah Snelson <noah.snelson@protonmail.com>
-
@jchv John Chadwick <johnwchadwick@gmail.com>
-
@romildo José Romildo Malaquias <malaquias@gmail.com>
-
@ju1m Julien Moutinho <julm+nixpkgs@sourcephile.fr>
-
@flokli Florian Klink <flokli@flokli.de>
-
@TomaSajt TomaSajt
-
@talyz Kim Lindberger <kim.lindberger@gmail.com>
-
@piotrkwiecinski Piotr Kwiecinski <piokwiecinski+nixpkgs@gmail.com>
-
@Ma27 Maximilian Bosch <maximilian@mbosch.me>
-
@bepri Imani Pelton <imani.pelton@canonical.com>
-
@dstathis Dylan Stephano-Shachter <dylan.stephano-shachter@canonical.com>
-
@adhityaravi Adhitya Ravi <adhitya.ravi@canonical.com>
-
@TyberiusPrime Tyberius Prime
-
@mbalatsko Maksym Balatsko <mbalatsko@gmail.com>
-
@PapayaJackal PapayaJackal
-
@pacien euxane <r9uhdi.nixpkgs@euxane.eu>
-
@xiaoxiangmoe ZHAO JinXiang <xiaoxiangmoe@gmail.com>
-
@D4ndellion Daniel Olsen <daniel@dodsorf.as>
-
@Aleksanaa Aleksana QwQ <me@aleksana.moe>
-
@bobby285271 Bobby Rong <rjl931189261@126.com>
-
@muscaln Mustafa Çalışkan <muscaln@protonmail.com>
-
@zhaofengli Zhaofeng Li <hello@zhaofeng.li>