Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-6110

Openstack: deleting a non existing access rule deletes another existing access rule in it's scope

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat OpenStack Platform 17.1 for RHEL 8

Default version status: affected

  • 0:5.5.2-17.1.20230829213816.el8ost to < *unaffected

Red Hat Red Hat OpenStack Platform 17.1 for RHEL 9

Default version status: affected

  • 0:5.5.2-17.1.20230829210830.el9ost to < *unaffected

Red Hat Red Hat OpenStack Platform 16.1

Default version status: affected

Red Hat Red Hat OpenStack Platform 16.2

Default version status: affected

Red Hat Red Hat OpenStack Platform 17.0

Default version status: unknown

Red Hat Red Hat OpenStack Platform 18.0

Default version status: affected

References