Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 9

Количество 9

ubuntu логотип

CVE-2023-41053

около 3 лет назад

Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem exists in Redis 7.0 or newer and has been fixed in Redis 7.0.13 and 7.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 3.3
EPSS: Низкий
redhat логотип

CVE-2023-41053

около 3 лет назад

Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem exists in Redis 7.0 or newer and has been fixed in Redis 7.0.13 and 7.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 3.3
EPSS: Низкий
nvd логотип

CVE-2023-41053

около 3 лет назад

Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem exists in Redis 7.0 or newer and has been fixed in Redis 7.0.13 and 7.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 3.3
EPSS: Низкий
debian логотип

CVE-2023-41053

около 3 лет назад

Redis is an in-memory database that persists on disk. Redis does not c ...

CVSS3: 3.3
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:3711-1

почти 3 года назад

Security update for redis7

EPSS: Низкий
github логотип

GHSA-q4jr-5p56-4xwc

около 3 лет назад

Redis SORT_RO may bypass ACL configuration

CVSS3: 3.3
EPSS: Низкий
fstec логотип

BDU:2023-05475

около 3 лет назад

Уязвимость системы управления базами данных Redis, связанная с небезопасным управлением привилегиями, позволяющая нарушителю получить несанкционированный доступ к ключам, которые явно не авторизованы конфигурацией ACL

CVSS3: 5.5
EPSS: Низкий
redos логотип

ROS-20230915-12

почти 3 года назад

Уязвимость redis

CVSS3: 5.5
EPSS: Низкий
oracle-oval логотип

ELSA-2024-10869

почти 2 года назад

ELSA-2024-10869: redis:7 security update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-41053

Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem exists in Redis 7.0 or newer and has been fixed in Redis 7.0.13 and 7.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 3.3
0%
Низкий
около 3 лет назад
redhat логотип
CVE-2023-41053

Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem exists in Redis 7.0 or newer and has been fixed in Redis 7.0.13 and 7.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 3.3
0%
Низкий
около 3 лет назад
nvd логотип
CVE-2023-41053

Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem exists in Redis 7.0 or newer and has been fixed in Redis 7.0.13 and 7.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 3.3
0%
Низкий
около 3 лет назад
debian логотип
CVE-2023-41053

Redis is an in-memory database that persists on disk. Redis does not c ...

CVSS3: 3.3
0%
Низкий
около 3 лет назад
suse-cvrf логотип
SUSE-SU-2023:3711-1

Security update for redis7

0%
Низкий
почти 3 года назад
github логотип
GHSA-q4jr-5p56-4xwc

Redis SORT_RO may bypass ACL configuration

CVSS3: 3.3
0%
Низкий
около 3 лет назад
fstec логотип
BDU:2023-05475

Уязвимость системы управления базами данных Redis, связанная с небезопасным управлением привилегиями, позволяющая нарушителю получить несанкционированный доступ к ключам, которые явно не авторизованы конфигурацией ACL

CVSS3: 5.5
0%
Низкий
около 3 лет назад
redos логотип
ROS-20230915-12

Уязвимость redis

CVSS3: 5.5
0%
Низкий
почти 3 года назад
oracle-oval логотип
ELSA-2024-10869

ELSA-2024-10869: redis:7 security update (MODERATE)

почти 2 года назад

Уязвимостей на страницу