PT-2023-2884 · Red Hat+2 · Red Hat+2

Tej Rathi · Published 2023-05-09 · Updated 2025-01-22 · CVE-2023-2319

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux (affected versions not specified)

Description The issue is related to inadequate access control in the operating system, which can be exploited by a remote attacker to gain unauthorized access to limited functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

ALSA-2023:2652

BDU:2023-02839

CVE-2023-2319

RHSA-2023:2652

RHSA-2023_2652

RLSA-2023:2652

Affected Products

Almalinux

Red Hat

Rocky Linux

References · 24

• https://osv.dev/vulnerability/RLSA-2023:2652 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-2652.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2319 · Security Note
• https://osv.dev/vulnerability/CVE-2023-2319 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02839 · Security Note
• https://osv.dev/vulnerability/ALSA-2023:2652 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-12595.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2023:2652 · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB20230509105 · Note
• https://t.me/cvenotify/50699 · Telegram Post
• https://access.redhat.com/security/cve/cve-2023-2319 · Note
• https://bugzilla.redhat.com/2176477 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2183180 · Note
• https://access.redhat.com/security/cve/CVE-2023-27539 · Note
• https://bugzilla.redhat.com/2190092 · Note