CVE-2023-0456

ALTO 7.5CVE-2023-0456 · Published 27/09/2023 · updated 17/06/2026

In breve

CVE-2023-0456 è una vulnerabilità ALTO (CVSS 7.5) che riguarda apicast (redhat).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.65%, superiore al 51.1% delle vulnerabilità.
Correzione: aggiornare a 2.13.2, 2.12.2 o successiva.

Package	Affected versions	Patched versions
apicast redhat	`≥ 2.13.0, < 2.13.2< 2.12.2`	`2.13.22.12.2`

Description

A flaw was found in APICast, when 3Scale's OIDC module does not properly evaluate the response to a mismatched token from a separate realm. This could allow a separate realm to be accessible to an attacker, permitting access to unauthorized information.

References

access.redhat.com/security/cve/CVE-2023-0456 · Vendor Advisory
bugzilla.redhat.com/show_bug.cgi · Exploit

Altre vulnerabilità di apicast

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free