Vulnerabilities > CVE-2023-4456 - Unspecified vulnerability in Redhat Openshift Logging

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
redhat
NVD
Published: 2023-08-21
Updated: 2024-11-21

Summary

A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached.

Vulnerable Configurations

Part Description Count
Application
Redhat
1

References