« Volver al listado

CVE-2023-6110

Estado: AplazadaMedia (5.5)—

A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Openstack — OpenstackAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-6110",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-6110",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-11-17T16:17:28.263809Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "secalert@redhat.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 2.1
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:/a:redhat:openstack:17.1::el8"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenStack Platform 17.1 for RHEL 8",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:5.5.2-17.1.20230829213816.el8ost",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "python-openstackclient",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openstack:17.1::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:5.5.2-17.1.20230829210830.el9ost",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "python-openstackclient",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openstack:16.1"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenStack Platform 16.1",
          "packageName": "openstack-keystone",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openstack:16.2"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenStack Platform 16.2",
          "packageName": "openstack-keystone",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openstack:17.0"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenStack Platform 17.0",
          "packageName": "openstack-keystone",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openstack:18.0"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenStack Platform 18.0",
          "packageName": "openstack-keystone",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2024-11-17T11:15:06.097",
  "references": [
    {
      "url": "https://access.redhat.com/errata/RHSA-2024:2737",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2024:2769",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/security/cve/CVE-2023-6110",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2212960",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://code.engineering.redhat.com/gerrit/gitweb?p=python-openstackclient.git;a=commit;h=7a7c364bdd7b2cd2b56e73724110710a68d58abf",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://review.opendev.org/c/openstack/python-openstackclient/+/888697",
      "source": "secalert@redhat.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secalert@redhat.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-237"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials."
    },
    {
      "lang": "es",
      "value": "Se encontró una falla en OpenStack. Cuando un usuario intenta eliminar una regla de acceso inexistente en su ámbito, elimina otras reglas de acceso existentes que no están asociadas con ninguna credencial de aplicación."
    }
  ],
  "lastModified": "2026-06-17T06:50:03.047",
  "sourceIdentifier": "secalert@redhat.com"
}