Vulnerabilities > CVE-2023-5056 - Missing Authorization vulnerability in Redhat Service Interconnect 1.0

047910
CVSS 4.1 - MEDIUM
Attack vector
ADJACENT_NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
low complexity
redhat
CWE-862
NVD
Published: 2023-12-18
Updated: 2024-11-21

Summary

A flaw was found in the Skupper operator, which may permit a certain configuration to create a service account that would allow an authenticated attacker in the adjacent cluster to view deployments in all namespaces in the cluster. This issue permits unauthorized viewing of information outside of the user's purview.

Vulnerable Configurations

Part Description Count
Application
Redhat
1
OS
Redhat
1

Common Weakness Enumeration (CWE)

References