Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline

CVE-2023-3899

🗓️ 23 Aug 2023 11:07:15Reported by redhatType 
cve
 cve🔗 web.nvd.nist.gov👁 480 Views

CVE-2023-3899: Local privilege escalation in subscription-manage

Show more
Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
Rockylinux		subscription-manager security update
24 Aug 202304:21
–rocky
Rockylinux		subscription-manager security update
28 Aug 202318:41
–rocky
IBM Security Bulletins		Security Bulletin: Red Hat Universal Base Image Minimal UBI Publicly disclosed vulnerability
28 Feb 202418:56
–ibm
IBM Security Bulletins		Security Bulletin: A vulnerability in Red Hat Enterprise Linux may affect IBM Robotic Process Automation for Cloud Pak and result in elevated privileges (CVE-2023-3899).
6 Nov 202321:56
–ibm
IBM Security Bulletins		Security Bulletin: IBM Cloud Pak for Network Automation 2.6.3 fixes multiple security vulnerabilities
1 Nov 202310:38
–ibm
IBM Security Bulletins		Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
16 Nov 202318:47
–ibm
IBM Security Bulletins		Security Bulletin: IBM Security Guardium is affected by multiple OS level vulnerabilities
14 Nov 202316:30
–ibm
IBM Security Bulletins		Security Bulletin: IBM Operational Decision Manager for December 2023 - Multiple CVEs addressed
8 Jan 202409:54
–ibm
IBM Security Bulletins		Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues
30 Nov 202318:45
–ibm
IBM Security Bulletins		Security Bulletin: Netcool Operations Insights 1.6.12 addresses multiple security vulnerabilities.
2 Apr 202411:06
–ibm
Rows per page
Nvd
Node
redhatsubscription-managerRange<1.28.39
OR
redhatsubscription-managerRange1.29.0–1.29.37
Node
fedoraprojectfedoraMatch37
OR
fedoraprojectfedoraMatch38
Node
redhatenterprise_linuxMatch8.0
OR
redhatenterprise_linuxMatch9.0
OR
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_eusMatch8.6
OR
redhatenterprise_linux_eusMatch8.8
OR
redhatenterprise_linux_eusMatch9.0
OR
redhatenterprise_linux_eusMatch9.2
OR
redhatenterprise_linux_for_arm_64Match8.0
OR
redhatenterprise_linux_for_arm_64Match9.0
OR
redhatenterprise_linux_for_arm_64Match9.2
OR
redhatenterprise_linux_for_arm_64_eusMatch8.6
OR
redhatenterprise_linux_for_arm_64_eusMatch8.8
OR
redhatenterprise_linux_for_arm_64_eusMatch9.0
OR
redhatenterprise_linux_for_arm_64_eusMatch9.2
OR
redhatenterprise_linux_for_ibm_z_systemsMatch7.0
OR
redhatenterprise_linux_for_ibm_z_systemsMatch8.0
OR
redhatenterprise_linux_for_ibm_z_systemsMatch9.0
OR
redhatenterprise_linux_for_ibm_z_systemsMatch9.2
OR
redhatenterprise_linux_for_ibm_z_systems_eusMatch8.6
OR
redhatenterprise_linux_for_ibm_z_systems_eusMatch8.8
OR
redhatenterprise_linux_for_ibm_z_systems_eusMatch9.0
OR
redhatenterprise_linux_for_ibm_z_systems_eusMatch9.2
OR
redhatenterprise_linux_for_power_big_endianMatch7.0
OR
redhatenterprise_linux_for_power_little_endianMatch7.0
OR
redhatenterprise_linux_for_power_little_endianMatch8.0
OR
redhatenterprise_linux_for_power_little_endianMatch9.0
OR
redhatenterprise_linux_for_power_little_endian_eusMatch8.8
OR
redhatenterprise_linux_for_power_little_endian_eusMatch9.0
OR
redhatenterprise_linux_for_power_little_endian_eusMatch9.2
OR
redhatenterprise_linux_for_scientific_computingMatch7.0
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_server_ausMatch8.2
OR
redhatenterprise_linux_server_ausMatch8.4
OR
redhatenterprise_linux_server_ausMatch8.6
OR
redhatenterprise_linux_server_ausMatch9.2
OR
redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.1
OR
redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.2
OR
redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.4
OR
redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.6
OR
redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.8
OR
redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch9.0
OR
redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch9.2
OR
redhatenterprise_linux_server_tusMatch8.2
OR
redhatenterprise_linux_server_tusMatch8.4
OR
redhatenterprise_linux_server_tusMatch8.6
OR
redhatenterprise_linux_server_tusMatch8.8
OR
redhatenterprise_linux_server_update_services_for_sap_solutionsMatch9.0
OR
redhatenterprise_linux_server_update_services_for_sap_solutionsMatch9.2
OR
redhatenterprise_linux_update_services_for_sap_solutionsMatch8.1
OR
redhatenterprise_linux_update_services_for_sap_solutionsMatch8.2
OR
redhatenterprise_linux_update_services_for_sap_solutionsMatch8.4
OR
redhatenterprise_linux_update_services_for_sap_solutionsMatch8.6
OR
redhatenterprise_linux_update_services_for_sap_solutionsMatch8.8
OR
redhatenterprise_linux_workstationMatch7.0
[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "subscription-manager",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.24.52-2.el7_9",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7::server",
      "cpe:/o:redhat:enterprise_linux:7::computenode",
      "cpe:/o:redhat:enterprise_linux:7::workstation",
      "cpe:/o:redhat:enterprise_linux:7::client"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "subscription-manager",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.28.36-3.el8_8",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8::baseos",
      "cpe:/a:redhat:enterprise_linux:8::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "subscription-manager",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.28.36-3.el8_8",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8::baseos",
      "cpe:/a:redhat:enterprise_linux:8::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "subscription-manager",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.25.17.1-2.el8_1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.1::appstream",
      "cpe:/o:redhat:rhel_e4s:8.1::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "subscription-manager",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.26.22-2.el8_2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.2::baseos",
      "cpe:/a:redhat:rhel_aus:8.2::appstream",
      "cpe:/a:redhat:rhel_tus:8.2::appstream",
      "cpe:/o:redhat:rhel_e4s:8.2::baseos",
      "cpe:/a:redhat:rhel_e4s:8.2::appstream",
      "cpe:/o:redhat:rhel_tus:8.2::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "subscription-manager",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.26.22-2.el8_2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.2::baseos",
      "cpe:/a:redhat:rhel_aus:8.2::appstream",
      "cpe:/a:redhat:rhel_tus:8.2::appstream",
      "cpe:/o:redhat:rhel_e4s:8.2::baseos",
      "cpe:/a:redhat:rhel_e4s:8.2::appstream",
      "cpe:/o:redhat:rhel_tus:8.2::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "subscription-manager",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.26.22-2.el8_2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.2::baseos",
      "cpe:/a:redhat:rhel_aus:8.2::appstream",
      "cpe:/a:redhat:rhel_tus:8.2::appstream",
      "cpe:/o:redhat:rhel_e4s:8.2::baseos",
      "cpe:/a:redhat:rhel_e4s:8.2::appstream",
      "cpe:/o:redhat:rhel_tus:8.2::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "subscription-manager",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.28.13-7.el8_4",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.4::baseos",
      "cpe:/a:redhat:rhel_e4s:8.4::appstream",
      "cpe:/o:redhat:rhel_e4s:8.4::baseos",
      "cpe:/a:redhat:rhel_aus:8.4::appstream",
      "cpe:/a:redhat:rhel_tus:8.4::appstream",
      "cpe:/o:redhat:rhel_tus:8.4::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "subscription-manager",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.28.13-7.el8_4",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.4::baseos",
      "cpe:/a:redhat:rhel_e4s:8.4::appstream",
      "cpe:/o:redhat:rhel_e4s:8.4::baseos",
      "cpe:/a:redhat:rhel_aus:8.4::appstream",
      "cpe:/a:redhat:rhel_tus:8.4::appstream",
      "cpe:/o:redhat:rhel_tus:8.4::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "subscription-manager",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.28.13-7.el8_4",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.4::baseos",
      "cpe:/a:redhat:rhel_e4s:8.4::appstream",
      "cpe:/o:redhat:rhel_e4s:8.4::baseos",
      "cpe:/a:redhat:rhel_aus:8.4::appstream",
      "cpe:/a:redhat:rhel_tus:8.4::appstream",
      "cpe:/o:redhat:rhel_tus:8.4::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "subscription-manager",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.28.29.1-2.el8_6",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_eus:8.6::appstream",
      "cpe:/o:redhat:rhel_eus:8.6::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "subscription-manager",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.29.33.1-2.el9_2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "subscription-manager",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:1.29.26.2-2.el9_0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_eus:9.0::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "subscription-manager",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ]
  }
]

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
23 Aug 2023 11:15Current
7.7High risk
Vulners AI Score7.7
CVSS37.8
EPSS0.0004
CWE-285CWE-863
cve-2023-3899vulnerabilitylocal privilege escalationsubscription-managerauthorizationd-bus interfacecom.redhat.rhsm1nvd
480
.json
Report