Lucene search
HistoryDec 18, 2023 - 12:15 a.m.
CVE-2023-50976
redpanda
authorization checks
transactions api
cve-2023-50976
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
26.9%
Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API.
Affected configurations
Node
redpandaredpandaRange<23.1.21
ORredpandaredpandaRange23.2.0–23.2.18
Related
prion
prion
Authorization
2023-12-18 00:15:00
cvelist
cvelist
CVE-2023-50976
2023-12-17 00:00:00
cve
cve
CVE-2023-50976
2023-12-18 00:15:11
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
26.9%
Related for NVD:CVE-2023-50976