5.5

CVE-2023-6110

A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.

Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerRed Hat
≫
Produkt Red Hat OpenStack Platform 17.1 for RHEL 8
Default Statusaffected
Version < *
Version 0:5.5.2-17.1.20230829213816.el8ost
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat OpenStack Platform 17.1 for RHEL 9
Default Statusaffected
Version < *
Version 0:5.5.2-17.1.20230829210830.el9ost
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat OpenStack Platform 16.1
Default Statusaffected
HerstellerRed Hat
≫
Produkt Red Hat OpenStack Platform 16.2
Default Statusaffected
HerstellerRed Hat
≫
Produkt Red Hat OpenStack Platform 17.0
Default Statusunknown
HerstellerRed Hat
≫
Produkt Red Hat OpenStack Platform 18.0
Default Statusaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.382
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
secalert@redhat.com 5.5 2.1 3.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CWE-237 Improper Handling of Structural Elements

The product does not handle or incorrectly handles inputs that are related to complex structures.