Vulnerability Details : CVE-2023-6944
A flaw was found in the Red Hat Developer Hub (RHDH). The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gaining access to this token and depending on permissions, an attacker could push malicious code to repositories, delete resources in Git, revoke or generate new keys, and sign code illegitimately.
Products affected by CVE-2023-6944
- cpe:2.3:a:redhat:red_hat_developer_hub:*:*:*:*:*:*:*:*
- cpe:2.3:a:linuxfoundation:backstage:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-6944
0.14%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 36 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-6944
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.7
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N |
2.1
|
3.6
|
NIST | 2024-01-10 |
|
7.3
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N |
2.1
|
5.2
|
Red Hat, Inc. | 2024-01-04 |
|
5.7
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N |
2.1
|
3.6
|
Red Hat, Inc. | 2024-01-25 |
|
7.3
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N |
N/A
|
N/A
|
RedHat-CVE-2023-6944 |
CWE ids for CVE-2023-6944
-
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.Assigned by: secalert@redhat.com (Secondary)
-
The product generates an error message that includes sensitive information about its environment, users, or associated data.Assigned by:
- nvd@nist.gov (Primary)
- secalert@redhat.com (Secondary)
References for CVE-2023-6944
-
https://bugzilla.redhat.com/show_bug.cgi?id=2255204
2255204 – (CVE-2023-6944) CVE-2023-6944 RHDH: catalog-import function leaks credentials to frontendIssue Tracking;Vendor Advisory
-
https://access.redhat.com/security/cve/CVE-2023-6944
CVE-2023-6944- Red Hat Customer PortalVendor Advisory
Jump to