Red Hat Authorino Denial-of-Service Vulnerability via AuthPolicy

A denial-of-service vulnerability has been identified in the Authorino service, specifically affecting Red Hat OpenShift Container Platform. This issue arises when a Developer persona interacts with an AuthPolicy that includes a sharedSecretRef, causing the Authorino service to become unresponsive. As a result, the evaluation of all AuthPolicies within the cluster is disrupted.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the Authorino service to become unresponsive and interrupting the evaluation of AuthPolicies across the cluster.