https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T22:23:32.542156+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-4456 CVE-2023-4456 — Openshift-logging: lokistack authorisation is cached too broadly 2026-10-12T22:23:32.558637+00:00

Affected: Red Hat RHOL-5.5-RHEL-8, Red Hat RHOL-5.6-RHEL-8, Red Hat RHOL-5.7-RHEL-8

A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached.