CVE-2023-0574

Summary

Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc. Yugabyte Managed allows Accessing Functionality Not Properly Constrained by ACLs, Communication Channel Manipulation, Authentication Abuse.This issue affects Yugabyte Managed: from 2.0.0.0 through 2.13.0.0

Affected Software

VendorProductVersion RangeStatus
YugabyteDBYugabyteDB Anywhere2.0.0.0 <= 2.13.0.0affected

Weaknesses

  • CWE-918: CWE-918 Server-Side Request Forgery (SSRF)
  • CWE-915: CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes
  • CWE-307: CWE-307 Improper Restriction of Excessive Authentication Attempts

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References