Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-2088

Опубликовано: 12 мая 2023
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:redhat:openstack:-:*:*:*:*:*:*:*

EPSS

Процентиль: 44%
0.00212
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-440
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 2 лет назад

A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality.

CVSS3: 9.1
redhat
больше 2 лет назад

A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality.

CVSS3: 6.5
debian
больше 2 лет назад

A flaw was found in OpenStack due to an inconsistency between Cinder a ...

CVSS3: 6.5
github
больше 2 лет назад

A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality.

CVSS3: 6.5
fstec
больше 2 лет назад

Уязвимость платформы облачных сервисов Openstack, связанная с отсутствием защиты служебных данных, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 44%
0.00212
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-440
NVD-CWE-noinfo