An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.
References
Link | Resource |
---|---|
https://access.redhat.com/errata/RHSA-2024:2736 | Vendor Advisory |
https://access.redhat.com/errata/RHSA-2024:2736 | Vendor Advisory |
https://access.redhat.com/errata/RHSA-2024:2770 | Vendor Advisory |
https://access.redhat.com/errata/RHSA-2024:2770 | Vendor Advisory |
https://access.redhat.com/security/cve/CVE-2023-6725 | Vendor Advisory |
https://access.redhat.com/security/cve/CVE-2023-6725 | Vendor Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=2249273 | Vendor Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=2249273 | Vendor Advisory |
Configurations
History
30 Jul 2025, 20:21
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:redhat:openstack_platform:17.1:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
First Time |
Redhat
Redhat openstack Platform |
|
CWE | ||
References | () https://bugzilla.redhat.com/show_bug.cgi?id=2249273 - Vendor Advisory | |
References | () https://access.redhat.com/errata/RHSA-2024:2736 - Vendor Advisory | |
References | () https://access.redhat.com/errata/RHSA-2024:2770 - Vendor Advisory | |
References | () https://access.redhat.com/security/cve/CVE-2023-6725 - Vendor Advisory |
22 May 2024, 22:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
15 Mar 2024, 13:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-03-15 13:15
Updated : 2025-07-30 20:21
NVD link : CVE-2023-6725
Mitre link : CVE-2023-6725
JSON object : View
Products Affected
redhat
- openstack_platform
CWE
No CWE.