Vulnerability-Lookup

RHSA-2023:0786

Vulnerability from csaf_redhat - Published: 2023-02-15 11:41 - Updated: 2025-11-21 18:37

Summary

Red Hat Security Advisory: Network observability 1.1.0 security update

Notes

Topic

Network observability 1.1.0 release for OpenShift Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

Network observability is an OpenShift operator that provides a monitoring pipeline to collect and enrich network flows that are produced by the Network observability eBPF agent. The operator provides dashboards, metrics, and keeps flows accessible in a queryable log store, Grafana Loki. When a FlowCollector is deployed, new dashboards are available in the Console. Security Fix(es): * network-observability-console-plugin-container: setting Loki authToken configuration to DISABLE or HOST mode leads to authentication longer being enforced (CVE-2023-0813) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Network observability 1.1.0 release for OpenShift\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Network observability is an OpenShift operator that provides a monitoring\npipeline to collect and enrich network flows that are produced by the\nNetwork observability eBPF agent.\n            \nThe operator provides dashboards, metrics, and keeps flows accessible in a\nqueryable log store, Grafana Loki. When a FlowCollector is deployed, new\ndashboards are available in the Console.\n\nSecurity Fix(es):\n\n* network-observability-console-plugin-container: setting Loki authToken configuration to DISABLE or HOST mode leads to authentication longer being enforced (CVE-2023-0813)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2023:0786",
        "url": "https://access.redhat.com/errata/RHSA-2023:0786"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2169468",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2169468"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0786.json"
      }
    ],
    "title": "Red Hat Security Advisory: Network observability 1.1.0 security update",
    "tracking": {
      "current_release_date": "2025-11-21T18:37:46+00:00",
      "generator": {
        "date": "2025-11-21T18:37:46+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2023:0786",
      "initial_release_date": "2023-02-15T11:41:51+00:00",
      "revision_history": [
        {
          "date": "2023-02-15T11:41:51+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2023-02-15T11:41:51+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T18:37:46+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "NETOBSERV 1.1 for RHEL 8",
                "product": {
                  "name": "NETOBSERV 1.1 for RHEL 8",
                  "product_id": "8Base-NETWORK-OBSERVABILITY-1.1.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:network_observ_optr:1.1.0::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Network Observability"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "network-observability/network-observability-console-plugin-rhel8@sha256:5e2e5273d549474458a5bc64866453f1564667cebf4a93eeef5ee3f8124e3a3a_amd64",
                "product": {
                  "name": "network-observability/network-observability-console-plugin-rhel8@sha256:5e2e5273d549474458a5bc64866453f1564667cebf4a93eeef5ee3f8124e3a3a_amd64",
                  "product_id": "network-observability/network-observability-console-plugin-rhel8@sha256:5e2e5273d549474458a5bc64866453f1564667cebf4a93eeef5ee3f8124e3a3a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-rhel8@sha256:5e2e5273d549474458a5bc64866453f1564667cebf4a93eeef5ee3f8124e3a3a?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-rhel8\u0026tag=v1.1.0-10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "network-observability/network-observability-ebpf-agent-rhel8@sha256:e0c32fed47a1c993187a188ec7338ad3a3b3148cc1a1d8306db8029bb10ff193_amd64",
                "product": {
                  "name": "network-observability/network-observability-ebpf-agent-rhel8@sha256:e0c32fed47a1c993187a188ec7338ad3a3b3148cc1a1d8306db8029bb10ff193_amd64",
                  "product_id": "network-observability/network-observability-ebpf-agent-rhel8@sha256:e0c32fed47a1c993187a188ec7338ad3a3b3148cc1a1d8306db8029bb10ff193_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-ebpf-agent-rhel8@sha256:e0c32fed47a1c993187a188ec7338ad3a3b3148cc1a1d8306db8029bb10ff193?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel8\u0026tag=v1.1.0-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "network-observability/network-observability-flowlogs-pipeline-rhel8@sha256:aa5f931b34c6413404c36a757aca99b89687a03fb9164a1938828e189376c45e_amd64",
                "product": {
                  "name": "network-observability/network-observability-flowlogs-pipeline-rhel8@sha256:aa5f931b34c6413404c36a757aca99b89687a03fb9164a1938828e189376c45e_amd64",
                  "product_id": "network-observability/network-observability-flowlogs-pipeline-rhel8@sha256:aa5f931b34c6413404c36a757aca99b89687a03fb9164a1938828e189376c45e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-flowlogs-pipeline-rhel8@sha256:aa5f931b34c6413404c36a757aca99b89687a03fb9164a1938828e189376c45e?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel8\u0026tag=v1.1.0-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "network-observability/network-observability-operator-bundle@sha256:757ae641f759f0e62b72947321df4f03430f74917f65c4d04f7f8e67ff7ccca1_amd64",
                "product": {
                  "name": "network-observability/network-observability-operator-bundle@sha256:757ae641f759f0e62b72947321df4f03430f74917f65c4d04f7f8e67ff7ccca1_amd64",
                  "product_id": "network-observability/network-observability-operator-bundle@sha256:757ae641f759f0e62b72947321df4f03430f74917f65c4d04f7f8e67ff7ccca1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-operator-bundle@sha256:757ae641f759f0e62b72947321df4f03430f74917f65c4d04f7f8e67ff7ccca1?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-operator-bundle\u0026tag=1.1.0-45"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "network-observability/network-observability-rhel8-operator@sha256:bf71a6ddd9be24ff0ae3875e6e79777a3832c04146e671a99bb3fccbdb92b4f4_amd64",
                "product": {
                  "name": "network-observability/network-observability-rhel8-operator@sha256:bf71a6ddd9be24ff0ae3875e6e79777a3832c04146e671a99bb3fccbdb92b4f4_amd64",
                  "product_id": "network-observability/network-observability-rhel8-operator@sha256:bf71a6ddd9be24ff0ae3875e6e79777a3832c04146e671a99bb3fccbdb92b4f4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-rhel8-operator@sha256:bf71a6ddd9be24ff0ae3875e6e79777a3832c04146e671a99bb3fccbdb92b4f4?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-rhel8-operator\u0026tag=v1.1.0-12"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "network-observability/network-observability-console-plugin-rhel8@sha256:5e2e5273d549474458a5bc64866453f1564667cebf4a93eeef5ee3f8124e3a3a_amd64 as a component of NETOBSERV 1.1 for RHEL 8",
          "product_id": "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-console-plugin-rhel8@sha256:5e2e5273d549474458a5bc64866453f1564667cebf4a93eeef5ee3f8124e3a3a_amd64"
        },
        "product_reference": "network-observability/network-observability-console-plugin-rhel8@sha256:5e2e5273d549474458a5bc64866453f1564667cebf4a93eeef5ee3f8124e3a3a_amd64",
        "relates_to_product_reference": "8Base-NETWORK-OBSERVABILITY-1.1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "network-observability/network-observability-ebpf-agent-rhel8@sha256:e0c32fed47a1c993187a188ec7338ad3a3b3148cc1a1d8306db8029bb10ff193_amd64 as a component of NETOBSERV 1.1 for RHEL 8",
          "product_id": "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-ebpf-agent-rhel8@sha256:e0c32fed47a1c993187a188ec7338ad3a3b3148cc1a1d8306db8029bb10ff193_amd64"
        },
        "product_reference": "network-observability/network-observability-ebpf-agent-rhel8@sha256:e0c32fed47a1c993187a188ec7338ad3a3b3148cc1a1d8306db8029bb10ff193_amd64",
        "relates_to_product_reference": "8Base-NETWORK-OBSERVABILITY-1.1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "network-observability/network-observability-flowlogs-pipeline-rhel8@sha256:aa5f931b34c6413404c36a757aca99b89687a03fb9164a1938828e189376c45e_amd64 as a component of NETOBSERV 1.1 for RHEL 8",
          "product_id": "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-flowlogs-pipeline-rhel8@sha256:aa5f931b34c6413404c36a757aca99b89687a03fb9164a1938828e189376c45e_amd64"
        },
        "product_reference": "network-observability/network-observability-flowlogs-pipeline-rhel8@sha256:aa5f931b34c6413404c36a757aca99b89687a03fb9164a1938828e189376c45e_amd64",
        "relates_to_product_reference": "8Base-NETWORK-OBSERVABILITY-1.1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "network-observability/network-observability-operator-bundle@sha256:757ae641f759f0e62b72947321df4f03430f74917f65c4d04f7f8e67ff7ccca1_amd64 as a component of NETOBSERV 1.1 for RHEL 8",
          "product_id": "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-operator-bundle@sha256:757ae641f759f0e62b72947321df4f03430f74917f65c4d04f7f8e67ff7ccca1_amd64"
        },
        "product_reference": "network-observability/network-observability-operator-bundle@sha256:757ae641f759f0e62b72947321df4f03430f74917f65c4d04f7f8e67ff7ccca1_amd64",
        "relates_to_product_reference": "8Base-NETWORK-OBSERVABILITY-1.1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "network-observability/network-observability-rhel8-operator@sha256:bf71a6ddd9be24ff0ae3875e6e79777a3832c04146e671a99bb3fccbdb92b4f4_amd64 as a component of NETOBSERV 1.1 for RHEL 8",
          "product_id": "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-rhel8-operator@sha256:bf71a6ddd9be24ff0ae3875e6e79777a3832c04146e671a99bb3fccbdb92b4f4_amd64"
        },
        "product_reference": "network-observability/network-observability-rhel8-operator@sha256:bf71a6ddd9be24ff0ae3875e6e79777a3832c04146e671a99bb3fccbdb92b4f4_amd64",
        "relates_to_product_reference": "8Base-NETWORK-OBSERVABILITY-1.1.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-0813",
      "cwe": {
        "id": "CWE-285",
        "name": "Improper Authorization"
      },
      "discovery_date": "2023-02-09T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-ebpf-agent-rhel8@sha256:e0c32fed47a1c993187a188ec7338ad3a3b3148cc1a1d8306db8029bb10ff193_amd64",
            "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-flowlogs-pipeline-rhel8@sha256:aa5f931b34c6413404c36a757aca99b89687a03fb9164a1938828e189376c45e_amd64",
            "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-operator-bundle@sha256:757ae641f759f0e62b72947321df4f03430f74917f65c4d04f7f8e67ff7ccca1_amd64",
            "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-rhel8-operator@sha256:bf71a6ddd9be24ff0ae3875e6e79777a3832c04146e671a99bb3fccbdb92b4f4_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2169468"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without authentication.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "network-observability-console-plugin-container: setting Loki authToken configuration to DISABLE or HOST mode leads to authentication longer being enforced",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-console-plugin-rhel8@sha256:5e2e5273d549474458a5bc64866453f1564667cebf4a93eeef5ee3f8124e3a3a_amd64"
        ],
        "known_not_affected": [
          "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-ebpf-agent-rhel8@sha256:e0c32fed47a1c993187a188ec7338ad3a3b3148cc1a1d8306db8029bb10ff193_amd64",
          "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-flowlogs-pipeline-rhel8@sha256:aa5f931b34c6413404c36a757aca99b89687a03fb9164a1938828e189376c45e_amd64",
          "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-operator-bundle@sha256:757ae641f759f0e62b72947321df4f03430f74917f65c4d04f7f8e67ff7ccca1_amd64",
          "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-rhel8-operator@sha256:bf71a6ddd9be24ff0ae3875e6e79777a3832c04146e671a99bb3fccbdb92b4f4_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-0813"
        },
        {
          "category": "external",
          "summary": "RHBZ#2169468",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2169468"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-0813",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-0813"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-0813",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0813"
        }
      ],
      "release_date": "2023-02-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-02-15T11:41:51+00:00",
          "details": "Apply this errata by upgrading Network observability operator 1.0 to 1.1",
          "product_ids": [
            "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-console-plugin-rhel8@sha256:5e2e5273d549474458a5bc64866453f1564667cebf4a93eeef5ee3f8124e3a3a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:0786"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-console-plugin-rhel8@sha256:5e2e5273d549474458a5bc64866453f1564667cebf4a93eeef5ee3f8124e3a3a_amd64",
            "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-ebpf-agent-rhel8@sha256:e0c32fed47a1c993187a188ec7338ad3a3b3148cc1a1d8306db8029bb10ff193_amd64",
            "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-flowlogs-pipeline-rhel8@sha256:aa5f931b34c6413404c36a757aca99b89687a03fb9164a1938828e189376c45e_amd64",
            "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-operator-bundle@sha256:757ae641f759f0e62b72947321df4f03430f74917f65c4d04f7f8e67ff7ccca1_amd64",
            "8Base-NETWORK-OBSERVABILITY-1.1.0:network-observability/network-observability-rhel8-operator@sha256:bf71a6ddd9be24ff0ae3875e6e79777a3832c04146e671a99bb3fccbdb92b4f4_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "network-observability-console-plugin-container: setting Loki authToken configuration to DISABLE or HOST mode leads to authentication longer being enforced"
    }
  ]
}

CVE-2023-0813 (GCVE-0-2023-0813)

Vulnerability from cvelistv5 – Published: 2023-09-15 20:17 – Updated: 2024-09-25 13:35

Title

Network-observability-console-plugin-container: setting loki authtoken configuration to disable or host mode leads to authentication longer being enforced

Summary

A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without authentication.

Severity ?

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-285 - Improper Authorization

Assigner

redhat

References

URL

Tags

	https://access.redhat.com/errata/RHSA-2023:0786	vendor-advisoryx_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2023-0813	vdb-entryx_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2169468	issue-trackingx_refsource_REDHAT

Impacted products

Vendor

Product

Version

Unaffected: 3badecfc675f63d7f497c4d86c296a0b9ac267e7 , < * (git)

Red Hat

NETWORK-OBSERVABILITY-1.1.0-RHEL-8

Unaffected: v1.1.0-10 , < * (rpm)
cpe:/a:redhat:network_observ_optr:1.1.0::el8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T05:24:34.543Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2023:0786",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:0786"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-0813"
          },
          {
            "name": "RHBZ#2169468",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2169468"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-0813",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-25T13:35:22.587617Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-25T13:35:54.194Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/netobserv/network-observability-console-plugin",
          "packageName": "github.com/netobserv/network-observability-console-plugin",
          "repo": "https://github.com/netobserv/network-observability-console-plugin",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "3badecfc675f63d7f497c4d86c296a0b9ac267e7",
              "versionType": "git"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:network_observ_optr:1.1.0::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "network-observability/network-observability-console-plugin-rhel8",
          "product": "NETWORK-OBSERVABILITY-1.1.0-RHEL-8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "v1.1.0-10",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "datePublic": "2023-02-13T00:00:00+00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without authentication."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-285",
              "description": "Improper Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-15T00:27:54.327174Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2023:0786",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2023:0786"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-0813"
        },
        {
          "name": "RHBZ#2169468",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2169468"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-02-09T00:00:00+00:00",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2023-02-13T00:00:00+00:00",
          "value": "Made public."
        }
      ],
      "title": "Network-observability-console-plugin-container: setting loki authtoken configuration to disable or host mode leads to authentication longer being enforced",
      "x_redhatCweChain": "CWE-287-\u003eCWE-285: Improper Authentication leads to Improper Authorization"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-0813",
    "datePublished": "2023-09-15T20:17:41.914Z",
    "dateReserved": "2023-02-13T16:49:21.409Z",
    "dateUpdated": "2024-09-25T13:35:54.194Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2023:0786

CVE-2023-0813 (GCVE-0-2023-0813)

Tags

Sightings

Nomenclature