Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-2088

Опубликовано: 12 мая 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 6.5

Описание

A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality.

РелизСтатусПримечание
bionic

ignored

end of standard support, was deferred
devel

not-affected

2:22.1.0+git2023071214.c1a18fcd-0ubuntu1
esm-infra/bionic

ignored

esm-infra/focal

ignored

esm-infra/xenial

ignored

focal

ignored

jammy

released

2:20.2.0-0ubuntu1.1
kinetic

ignored

end of life
lunar

released

2:22.0.0-0ubuntu1.3
trusty

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was deferred
devel

not-affected

1:22.0.0+git2023071214.416ea871-0ubuntu1
esm-apps/bionic

ignored

esm-apps/focal

ignored

esm-apps/jammy

released

1:20.1.0-0ubuntu1.1
esm-apps/xenial

ignored

focal

ignored

jammy

released

1:20.1.0-0ubuntu1.1
kinetic

ignored

end of life
lunar

released

1:21.4.0-0ubuntu1.1

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was deferred
devel

released

3:27.0.0-0ubuntu4
esm-infra/bionic

ignored

esm-infra/focal

ignored

esm-infra/xenial

ignored

focal

ignored

jammy

released

3:25.1.1-0ubuntu1.1
kinetic

ignored

end of life
lunar

released

3:27.0.0-0ubuntu1.3
trusty

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was deferred
devel

not-affected

4.6.0-0ubuntu1
esm-infra/bionic

ignored

esm-infra/focal

ignored

esm-infra/xenial

ignored

focal

ignored

jammy

released

3.0.0-0ubuntu1.3
kinetic

ignored

end of life
lunar

released

4.3.0-0ubuntu1.3
trusty

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was deferred
devel

not-affected

6.3.0-0ubuntu1
esm-infra/bionic

ignored

esm-infra/focal

ignored

esm-infra/xenial

ignored

focal

ignored

jammy

released

5.2.2-0ubuntu1.2
kinetic

ignored

end of life
lunar

released

6.2.0-0ubuntu2.3
trusty

ignored

end of standard support

Показывать по

EPSS

Процентиль: 44%
0.00212
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 9.1
redhat
больше 2 лет назад

A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality.

CVSS3: 6.5
nvd
больше 2 лет назад

A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality.

CVSS3: 6.5
debian
больше 2 лет назад

A flaw was found in OpenStack due to an inconsistency between Cinder a ...

CVSS3: 6.5
github
больше 2 лет назад

A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality.

CVSS3: 6.5
fstec
больше 2 лет назад

Уязвимость платформы облачных сервисов Openstack, связанная с отсутствием защиты служебных данных, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 44%
0.00212
Низкий

6.5 Medium

CVSS3