Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-0923

A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications from making requests to the Jupyter API. This flaw can lead to file content exposure and other issues.

Published

2023-09-15T21:15:09.153

Last Modified

2024-11-21T07:38:06.380

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses

Type: Secondary
CWE-862
Type: Primary
CWE-862

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	redhat	openshift_data_science	< 1.22.1-3	Yes
Operating System	redhat	enterprise_linux	8.0	No

References

https://access.redhat.com/errata/RHSA-2023:0977 Vendor Advisory ([email protected])
https://access.redhat.com/security/cve/CVE-2023-0923 Vendor Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=2171870 Issue Tracking, Vendor Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2023:0977 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/security/cve/CVE-2023-0923 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=2171870 Issue Tracking, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)