RHSA-2024:0214 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-werkzeug) security update

🗓️ 18 Sep 2024 05:15:51Reported by GoogleType

osv

osv🔗 osv.dev👁 8 Views

Red Hat OpenStack Platform 17.1 (python-werkzeug) security updat

Reporter	Title	Published	Views	Family All 118
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Pallets Werkzeug denial of service vulnerabilitiy [ CVE-2023-46136]	5 Feb 202419:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Uncontrolled Resource Consumption and Improper Input Validation in Werkzeug (CVE-2023-46136, CVE-2023-25577, CVE-2023-23934)	1 Jul 202518:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Pallets Werkzeug (CVE-2023-46136)	20 Mar 202400:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Cryptography, Werkzeug might affect IBM Storage Sentinel Anomaly Scan Engine (CVE-2023-49083, CVE-2023-46136)	22 Mar 202416:13	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability Werkzeug, Twisted-22.10.0-py3, requests-2.32.2-py3, commons-lang-2.6, commons-fileupload-1.5, urllib3-2.2.2, jetty-server-9.4.56.v20240826 affect IBM Cloud Object Storage Systems (Oct 2025)	24 Oct 202515:45	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	3 May 202410:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Pallets Werkzeug	31 Jan 202421:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Werkzeug affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [ CVE-2023-46136]	27 Feb 202512:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Pallets Werkzeug [CVE-2023-46136]	25 Apr 202418:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Werkzeug affects IBM Process Mining CVE-2023-46136	15 Dec 202315:42	–	ibm

Source	Link
access	www.access.redhat.com/errata/RHSA-2024:0214
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0214.json
access	www.access.redhat.com/security/cve/CVE-2023-46136
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-46136
github	www.github.com/pallets/werkzeug/commit/f3c803b3ade485a45f12b6d6617595350c0f03e2
github	www.github.com/pallets/werkzeug/security/advisories/GHSA-hrfv-mqp8-q5rw

28 Jan 2026 10:36Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.00878

red hat openstack platform python werkzeug security update