Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ccmh-37rx-6pp5

Опубликовано: 21 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.7

Описание

A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached.

A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached.

EPSS

Процентиль: 25%
0.00085
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-1220

Связанные уязвимости

CVSS3: 5.7
redhat
больше 2 лет назад

A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached.

CVSS3: 5.7
nvd
больше 2 лет назад

A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached.

EPSS

Процентиль: 25%
0.00085
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-1220