CVE-2023-4380

MEDIUM

6.3

Beschreibung

A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability.

CVE Details

CVSS v3.1 Bewertung6.3

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht10/4/2023

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

redhat:ansible_automation_platformredhat:ansible_developerredhat:ansible_insideredhat:enterprise_linux

Schwachen (CWE)

CWE-532CWE-532

Referenzen

https://access.redhat.com/errata/RHSA-2023:4693(secalert@redhat.com)

https://access.redhat.com/security/cve/CVE-2023-4380(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=2232324(secalert@redhat.com)

https://access.redhat.com/errata/RHSA-2023:4693(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/security/cve/CVE-2023-4380(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=2232324(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.