CVE-2023-6110 — Openstack: deleting a non existing access rule deletes another existing access rule in it's scope

Affected: Red Hat OpenStack Platform 17.1 for RHEL 8, Red Hat OpenStack Platform 17.1 for RHEL 9, Red Hat OpenStack Platform 16.1, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.0, Red Hat OpenStack Platform 18.0

A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.

USN-6668-1 — python-openstackclient vulnerability

Affected: Ubuntu:20.04:LTS: python-openstackclient, Ubuntu:22.04:LTS: python-openstackclient

It was discovered that when python-openstackclient attempted to delete a non-existing access rule, it would delete another existing access rule instead, contrary to expectations.

Most recent entries from all

CVE-2023-6110 — Openstack: deleting a non existing access rule deletes another existing access rule in it's scope

USN-6668-1 — python-openstackclient vulnerability