Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2023-6110

Good to know:

icon
icon

Date: November 17, 2024

A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.

Language: Python

Severity Score

Related Resources (12)

https://access.redhat.com/security/cve/CVE-2023-6110
https://access.redhat.com/errata/RHSA-2024:2737
https://access.redhat.com/errata/RHSA-2024:2769
https://people.canonical.com/~ubuntu-security/cve/CVE-2023-6110
https://review.opendev.org/c/openstack/python-openstackclient/+/888697
https://github.com/openstack/python-openstackclient/commit/bc60e3bb908a7f10c87993d791184bfe46784d6c
https://github.com/openstack/python-openstackclient
https://code.engineering.redhat.com/gerrit/gitweb?p=python-openstackclient.git;a=commit;h=7a7c364bdd7b2cd2b56e73724110710a68d58abf
https://nvd.nist.gov/vuln/detail/CVE-2023-6110
https://security-tracker.debian.org/tracker/CVE-2023-6110
https://bugzilla.redhat.com/show_bug.cgi?id=2212960
https://www.mend.io/vulnerability-database/CVE-2023-6110

Severity Score

Weakness Type (CWE)

Improper Handling of Structural Elements

CWE-237

Top Fix

icon

Upgrade Version

Upgrade to version python-openstackclient - 6.3.0

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): LOW

Do you need more information?

Contact Us