CVE-2023-3976

2024-02-2115:02:30

redhat.com

access.redhat.com

flaw

sudoers

local attacker

elevated privileges

red hat openstack

misconfiguration

restricted commands

root privileges

cve-2023-3976

cve-2022-38060

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

Percentile

12.9%

JSON

A flaw was found in /etc/sudoers in Red Hat OpenStack. As a result of this misconfiguration in the sudoers file, the application is allowed to run restricted commands with root privileges. This issue could allow a local authenticated attacker to gain elevated privileges on the system. This flaw is related to an earlier CVE-2022-38060.