Red Hat Authorino Denial-of-Service Vulnerability in Connectivity Link

A denial-of-service vulnerability has been identified in the Authorino service of Red Hat Connectivity Link, which is responsible for zero trust API security. The issue arises because an attacker with developer persona access can overload the system by adding a large number of post-authorization callback actions. Since the authorization policy is managed by a single instance of Authorino, this overload causes a denial-of-service condition while the service processes these callbacks.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition in the Authorino service, causing it to become unresponsive or slow while processing overloaded post-authorization callbacks.