CVE-2023-6110 describes a flaw in OpenStack where attempting to delete a non-existent access rule can inadvertently remove other legitimate access rules not tied to application credentials. This vulnerability has a medium severity CVSS score of 5.5, indicating a low-complexity attack requiring user interaction and leading to low impacts on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Red Hat | Red Hat OpenStack Platform 16.1 | All Versions ImpactedCNA affecteddefault affected | |
| Red Hat | Red Hat OpenStack Platform 16.2 | All Versions ImpactedCNA affecteddefault affected | |
| Red Hat | Red Hat OpenStack Platform 17.0 | Range not provided by sourceCNA affecteddefault unknown | |
| Red Hat | Red Hat OpenStack Platform 17.1 For RHEL 8 | Range not provided by sourceCNA affecteddefault affected | |
| Red Hat | Red Hat OpenStack Platform 17.1 For RHEL 9 | Range not provided by sourceCNA affecteddefault affected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.