Rhel-lightspeed: improper access control in lightspeed history management allows local privilege manipulation

A flaw was found in the Lightspeed history service. Insufficient access controls allow a local, unprivileged user to access and manipulate the chat history of another user on the same system. By abusing inter-process communication calls to the history service, an attacker can view, delete, or inject arbitrary history entries, including misleading or malicious commands. This can be used to deceive another user into executing harmful actions, posing a risk of privilege misuse or unauthorized command execution through social engineering.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

访问控制不恰当

Red Hat OpenShift Lightspeed 安全漏洞

Red Hat OpenShift Lightspeed是美国红帽（Red Hat）公司的一个基于 OpenShift 平台的加速工具。旨在提高 Kubernetes 应用程序的开发和部署速度。 Red Hat OpenShift Lightspeed存在安全漏洞，该漏洞源于访问控制不足，可能导致本地低权限用户访问和操作同一系统上其他用户的聊天历史。

N/A

N/A