{"id":"CVE-2023-6725","state":"PUBLISHED","title":"Tripleo-ansible: bind keys are world readable","description":"An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.","publishedAt":"2024-03-15T12:38:23.158Z","updatedAt":"2026-02-25T18:20:14.710Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","source":"redhat"},"assigner":"redhat","products":["Red Hat Red Hat OpenStack Platform 17.1 for RHEL 8","Red Hat Red Hat OpenStack Platform 17.1 for RHEL 9","Red Hat Red Hat OpenStack Platform 16.1","Red Hat Red Hat OpenStack Platform 16.2","Red Hat Red Hat OpenStack Platform 17.1","Red Hat Red Hat OpenStack Platform 18.0"],"affected":[{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1 for RHEL 8","packageName":"openstack-tripleo-heat-templates","defaultStatus":"affected","versions":[{"version":"0:14.3.1-17.1.20231103003762.el8ost","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.1::el8"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1 for RHEL 8","packageName":"tripleo-ansible","defaultStatus":"affected","versions":[{"version":"0:3.3.1-17.1.20231101233754.el8ost","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.1::el8"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1 for RHEL 9","packageName":"openstack-tripleo-heat-templates","defaultStatus":"affected","versions":[{"version":"0:14.3.1-17.1.20231103010840.el9ost","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.1::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1 for RHEL 9","packageName":"tripleo-ansible","defaultStatus":"affected","versions":[{"version":"0:3.3.1-17.1.20231101230831.el9ost","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.1::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 16.1","packageName":"openstack-designate","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:16.1"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 16.2","packageName":"openstack-designate","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:16.2"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1","packageName":"openstack-designate","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.1"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","packageName":"openstack-designate","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:18.0"]}],"references":["https://access.redhat.com/errata/RHSA-2024:2736","https://access.redhat.com/errata/RHSA-2024:2770","https://access.redhat.com/security/cve/CVE-2023-6725","https://bugzilla.redhat.com/show_bug.cgi?id=2249273"],"weaknesses":["CWE-1220"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/6xxx/CVE-2023-6725.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-6725","state":"PUBLISHED","datePublished":"2024-03-15T12:38:23.158Z","dateUpdated":"2026-02-25T18:20:14.710Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2023-12-12T09:57:13.700Z"},"containers":{"cna":{"title":"Tripleo-ansible: bind keys are world readable","descriptions":[{"lang":"en","value":"An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information."}],"affected":[{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1 for RHEL 8","packageName":"openstack-tripleo-heat-templates","defaultStatus":"affected","versions":[{"version":"0:14.3.1-17.1.20231103003762.el8ost","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.1::el8"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1 for RHEL 8","packageName":"tripleo-ansible","defaultStatus":"affected","versions":[{"version":"0:3.3.1-17.1.20231101233754.el8ost","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.1::el8"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1 for RHEL 9","packageName":"openstack-tripleo-heat-templates","defaultStatus":"affected","versions":[{"version":"0:14.3.1-17.1.20231103010840.el9ost","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.1::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1 for RHEL 9","packageName":"tripleo-ansible","defaultStatus":"affected","versions":[{"version":"0:3.3.1-17.1.20231101230831.el9ost","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.1::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 16.1","packageName":"openstack-designate","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:16.1"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 16.2","packageName":"openstack-designate","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:16.2"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1","packageName":"openstack-designate","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:17.1"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","packageName":"openstack-designate","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openstack:18.0"]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:2736","name":"RHSA-2024:2736","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2770","name":"RHSA-2024:2770","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6725","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249273","name":"RHBZ#2249273","tags":["issue-tracking","x_refsource_REDHAT"]}],"metrics":[{"other":{"content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1220","description":"Insufficient Granularity of Access Control","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2026-02-25T18:20:14.710Z"},"datePublic":"2024-03-15T00:00:00.000Z","x_redhatCweChain":"CWE-1220: Insufficient Granularity of Access Control","timeline":[{"lang":"en","time":"2023-11-11T00:00:00.000Z","value":"Reported to Red Hat."},{"lang":"en","time":"2024-03-15T00:00:00.000Z","value":"Made public."}],"credits":[{"lang":"en","value":"This issue was discovered by Michael Johnson (Red Hat)."}],"x_generator":{"engine":"cvelib 1.8.0"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/errata/RHSA-2024:2736","name":"RHSA-2024:2736","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2770","name":"RHSA-2024:2770","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6725","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249273","name":"RHBZ#2249273","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T08:35:14.912Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-03-15T16:37:30.842696Z","id":"CVE-2023-6725","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-12T20:40:29.242Z"}}]}}}