CVE-2023-4456

CVE-2023-4456 is a medium-severity vulnerability affecting Red Hat OpenShift Logging LokiStack. The flaw stems from an overly broad caching mechanism where the authorization token alone serves as the cache key. This allows an authenticated attacker to potentially perform unauthorized actions if their token, initially valid for a specific action, remains cached for other actions. The vulnerability has a CVSS score of 6.5 (Medium), indicating it can be exploited remotely with low complexity to achieve high integrity impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.