CVE-2023-6110

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-237

Affected software

VendorProductVersions
Red HatRed Hat OpenStack Platform 17.1 for RHEL 8—
Red HatRed Hat OpenStack Platform 17.1 for RHEL 9—
Red HatRed Hat OpenStack Platform 16.1—
Red HatRed Hat OpenStack Platform 16.2—
Red HatRed Hat OpenStack Platform 17.0—
Red HatRed Hat OpenStack Platform 18.0—

References

Timeline

Published
Nov 17, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-61117.8A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. CVE-2023-61128.8Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via aCVE-2023-61137.5The WP STAGING WordPress Backup Plugin before 3.1.3 and WP STAGING Pro WordPress Backup Plugin before 5.1.3 do not prevent visitors from leaCVE-2023-61147.5The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listing the `backups-dup-lCVE-2023-61168.9Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the camera. An attacker could inject malicioCVE-2023-61177.5A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-FilesCVE-2023-61187.5Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP Camera: before b1130CVE-2023-61197.8An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privilege attacker to gain aCVE-2023-61202.7The Welcart e-Commerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.6 via the upload_CVE-2023-61214.3An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to seCVE-2023-61226.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in İstanbul Soft Informatics and ConsultaCVE-2023-61236.1Improper Neutralization vulnerability affects OpenText ALM Octane version 16.2.100 and above. The vulnerability could result in a remote cod