What’s Vulnerable › Vulnerabilities

CVE-2023-0813: Network-observability-console-plugin-container: setting loki authtoken configuration to disable or host mode leads to authentication longer being enforced

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-09-15 · updated 2026-06-17
• Weakness: CWE-285

Description

A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without authentication.

Affected products

• Red Hat NETWORK-OBSERVABILITY-1.1.0-RHEL-8: 1.0

References

• https://access.redhat.com/errata/RHSA-2023:0786
• https://access.redhat.com/security/cve/CVE-2023-0813
• https://bugzilla.redhat.com/show_bug.cgi?id=2169468
• https://access.redhat.com/errata/RHSA-2023:0786
• https://access.redhat.com/security/cve/CVE-2023-0813
• https://bugzilla.redhat.com/show_bug.cgi?id=2169468

Get alerted when CVE-2023-0813 or the next vulnerability affects your stack