{"id":"CVE-2023-6110","state":"PUBLISHED","title":"Openstack: deleting a non existing access rule deletes another existing access rule in it's scope","description":"A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.","publishedAt":"2024-11-17T10:22:34.776Z","updatedAt":"2024-12-05T20:30:27.043Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","source":"redhat"},"assigner":"redhat","products":["Red Hat Red Hat OpenStack Platform 17.1 for RHEL 8","Red Hat Red Hat OpenStack Platform 17.1 for RHEL 9","Red Hat Red Hat OpenStack Platform 16.1","Red Hat Red Hat OpenStack Platform 16.2","Red Hat Red Hat OpenStack Platform 17.0","Red Hat Red Hat OpenStack Platform 18.0"],"affected":[{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1 for RHEL 8","packageName":"python-openstackclient","defaultStatus":"affected","versions":[{"version":"0:5.5.2-17.1.20230829213816.el8ost","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.1::el8"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1 for RHEL 9","packageName":"python-openstackclient","defaultStatus":"affected","versions":[{"version":"0:5.5.2-17.1.20230829210830.el9ost","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.1::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 16.1","packageName":"openstack-keystone","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:16.1"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 16.2","packageName":"openstack-keystone","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:16.2"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.0","packageName":"openstack-keystone","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.0"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","packageName":"openstack-keystone","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:18.0"]}],"references":["https://access.redhat.com/errata/RHSA-2024:2737","https://access.redhat.com/errata/RHSA-2024:2769","https://access.redhat.com/security/cve/CVE-2023-6110","https://bugzilla.redhat.com/show_bug.cgi?id=2212960","https://code.engineering.redhat.com/gerrit/gitweb?p=python-openstackclient.git;a=commit;h=7a7c364bdd7b2cd2b56e73724110710a68d58abf","https://review.opendev.org/c/openstack/python-openstackclient/+/888697"],"weaknesses":["CWE-237"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/6xxx/CVE-2023-6110.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-6110","state":"PUBLISHED","datePublished":"2024-11-17T10:22:34.776Z","dateUpdated":"2024-12-05T20:30:27.043Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2023-11-13T19:27:25.305Z"},"containers":{"cna":{"title":"Openstack: deleting a non existing access rule deletes another existing access rule in it's scope","descriptions":[{"lang":"en","value":"A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials."}],"affected":[{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1 for RHEL 8","packageName":"python-openstackclient","defaultStatus":"affected","versions":[{"version":"0:5.5.2-17.1.20230829213816.el8ost","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.1::el8"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1 for RHEL 9","packageName":"python-openstackclient","defaultStatus":"affected","versions":[{"version":"0:5.5.2-17.1.20230829210830.el9ost","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.1::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 16.1","packageName":"openstack-keystone","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:16.1"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 16.2","packageName":"openstack-keystone","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:16.2"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.0","packageName":"openstack-keystone","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.0"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","packageName":"openstack-keystone","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:18.0"]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:2737","name":"RHSA-2024:2737","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2769","name":"RHSA-2024:2769","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6110","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212960","name":"RHBZ#2212960","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://code.engineering.redhat.com/gerrit/gitweb?p=python-openstackclient.git;a=commit;h=7a7c364bdd7b2cd2b56e73724110710a68d58abf"},{"url":"https://review.opendev.org/c/openstack/python-openstackclient/+/888697"}],"metrics":[{"other":{"content":{"namespace":"https://access.redhat.com/security/updates/classification/","value":"Moderate"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-237","description":"Improper Handling of Structural Elements","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2024-12-05T20:30:27.043Z"},"datePublic":"2024-01-24T00:00:00.000Z","x_redhatCweChain":"CWE-237: Improper Handling of Structural Elements","timeline":[{"lang":"en","time":"2023-06-05T00:00:00.000Z","value":"Reported to Red Hat."},{"lang":"en","time":"2024-01-24T00:00:00.000Z","value":"Made public."}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-11-17T16:17:28.263809Z","id":"CVE-2023-6110","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-11-26T14:38:40.898Z"}}]}}}