A flaw was found in... CVE-2023-4456

- AV AC AU C I A
发布: 2023-08-21
修订: 2023-11-07

A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息