OpenShift Lightspeed Service Unauthenticated API Flooding Vulnerability

A vulnerability exists in the OpenShift Lightspeed Service due to the lack of authentication for API requests. This flaw allows unauthenticated users to flood the service with requests to non-existent endpoints, leading to an accumulation of metric data. The excessive resource consumption from this flooding can degrade application performance and disrupt monitoring systems. The issue causes increased usage of CPU, RAM, and disk space, which can result in service outages and destabilize the entire cluster.

Impact

Exploitation of this vulnerability can cause high CPU and memory usage, increased disk space consumption, and degradation of application performance and cluster stability, potentially leading to service unavailability.