CVE-2023-6110
Fixed in a distro release EPSS <1%CVSS 5.5
A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.
Products: Red Hat OpenStack Platform 17.1 for RHEL 8, Red Hat OpenStack Platform 17.1 for RHEL 9, Red Hat OpenStack Platform 16.1, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.0, Red Hat OpenStack Platform 18.0
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | python-openstackclient | 6.3.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | python-openstackclient | no fix |
| Debian 13 | python-openstackclient | 6.3.0-2 |
| Debian 14 | python-openstackclient | 6.3.0-2 |
| Red Hat openstack 17.1 | python-openstackclient | 0:5.5.2-17.1.20230829213816.el8ost |
| Red Hat openstack 17.1 | python-openstackclient | 0:5.5.2-17.1.20230829210830.el9ost |
| Red Hat openstack 17.1 | python-openstackclient-lang | 0:5.5.2-17.1.20230829210830.el9ost |
| Red Hat openstack 17.1 | python-openstackclient-lang | 0:5.5.2-17.1.20230829213816.el8ost |
| Red Hat openstack 17.1 | python3-openstackclient | 0:5.5.2-17.1.20230829210830.el9ost |
| Red Hat openstack 17.1 | python3-openstackclient | 0:5.5.2-17.1.20230829213816.el8ost |
| Ubuntu 16.04 LTS | python-openstackclient | no fix |
| Ubuntu 18.04 LTS | python-openstackclient | no fix |
| Ubuntu 20.04 LTS | python-openstackclient | 5.2.0-0ubuntu1.20.04.2 |
| Ubuntu 22.04 LTS | python-openstackclient | 5.8.0-0ubuntu1.1 |