CVE-2023-5056

MediumCVSS 4.1/10Last modified Jun 17, 2026

Description

A flaw was found in the Skupper operator, which may permit a certain configuration to create a service account that would allow an authenticated attacker in the adjacent cluster to view deployments in all namespaces in the cluster. This issue permits unauthorized viewing of information outside of the user's purview.

Metrics

CVSS 3.1 4.1/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Weakness enumeration

CWE-862

Affected software

Vendor	Product	Versions
Red Hat	Service Interconnect 1 for RHEL 9	—
Red Hat	Service Interconnect 1 for RHEL 9	—
Red Hat	Service Interconnect 1 for RHEL 9	—
Red Hat	Service Interconnect 1 for RHEL 9	—
Red Hat	Service Interconnect 1 for RHEL 9	—
Red Hat	Service Interconnect 1 for RHEL 9	—

References

https://access.redhat.com/errata/RHSA-2023:6219Vendor Advisory
https://access.redhat.com/security/cve/CVE-2023-5056Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2239517Issue Tracking
https://access.redhat.com/errata/RHSA-2023:6219Vendor Advisory
https://access.redhat.com/security/cve/CVE-2023-5056Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2239517Issue Tracking

Timeline

Published: Dec 18, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-505639.8Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMS_Function.php.CVE-2023-505648.8An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary CVE-2023-505655.4A cross-site scripting (XSS) vulnerability in the component /logs/dopost.html in RPCMS v3.5.5 allows attackers to execute arbitrary web scri CVE-2023-505665.4A stored cross-site scripting (XSS) vulnerability in EyouCMS-V1.6.5-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a CVE-2023-50575.4The ActivityPub WordPress plugin before 1.0.0 does not escape user metadata before outputting them in mentions, which could allow users with CVE-2023-505705.5An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop. This is disputed because an infinite loop occ CVE-2023-505717.8easy-rules-mvel v4.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component MVELRule.CVE-2023-505725.5An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.CVE-2023-505789.8Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do.CVE-2023-50587.8Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potential CVE-2023-505859.8Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.CVE-2023-505899.8Grupo Embras GEOSIAP ERP v2.2.167.02 was discovered to contain a SQL injection vulnerability via the codLogin parameter on the login page.