cveboard RSS feed

CVE-2023-0813

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Network-observability-console-plugin-container: setting loki authtoken configuration to disable or host mode leads to authentication longer being enforced

A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without authentication.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

github.com/netobserv/network-observability-console-plugin

Vendor
Unknown
Product
Unknown
Platforms
Unknown
Default status
Unknown
Package
github.com/netobserv/network-observability-console-plugin
Package collection
https://github.com/netobserv/network-observability-console-plugin
github.com/netobserv/network-observability-console-plugin · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
3badecfc675f63d7f497c4d86c296a0b9ac267e7unaffectedgit*UnavailableNone listed

NETWORK-OBSERVABILITY-1.1.0-RHEL-8

Vendor
Red Hat
Product
NETWORK-OBSERVABILITY-1.1.0-RHEL-8
Platforms
Unknown
Default status
affected
Package
network-observability/network-observability-console-plugin-rhel8
Package collection
https://catalog.redhat.com/software/containers/
NETWORK-OBSERVABILITY-1.1.0-RHEL-8 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
v1.1.0-10unaffectedrpm*UnavailableNone listed