PT-2024-8621 · Openstack+4 · Openstack+4

Anten Skrabec · Published 2024-01-24 · Updated 2024-12-05 · CVE-2023-6110

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenStack (affected versions not specified)

Description A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in its scope, it deletes other existing access rules which are not associated with any application credentials. This issue may allow a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-404

CWE-237

Related Identifiers

BDU:2024-10195

CVE-2023-6110

GHSA-2PPF-2M6F-6V6F

RHSA-2024:2737

RHSA-2024:2769

USN-6668-1

Affected Products

Debian

Linuxmint

Openstack

Red Os

Ubuntu

References · 26

• https://osv.dev/vulnerability/UBUNTU-CVE-2023-6110 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:2769 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-6110 · Security Note
• https://bdu.fstec.ru/vul/2024-10195 · Security Note
• https://osv.dev/vulnerability/CVE-2023-6110 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2ppf-2m6f-6v6f · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:2737 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6110 · Security Note
• https://osv.dev/vulnerability/USN-6668-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-6110 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-6110 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6668-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-6110 · Vendor Advisory
• https://github.com/openstack/python-openstackclient/commit/bc60e3bb908a7f10c87993d791184bfe46784d6c · Note
• https://github.com/openstack/python-openstackclient · Note