Vulnerabilities > CVE-2023-4456 - Unspecified vulnerability in Redhat Openshift Logging
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |