Lucene search

GoogleOSV:CVE-2023-6001

HistoryNov 08, 2023 - 12:15 a.m.

CVE-2023-6001

2023-11-0800:15:07

Google

osv.dev

cve-2023-6001

yugabytedb

anywhere

environment

software

sensitive information

unauthenticated access

prometheus metrics

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.3%

JSON

Prometheus metrics are available without
authentication. These expose detailed and sensitive information about the YugabyteDB Anywhere environment.

CPENameOperatorVersion
yugabyte-dbeq2.18.3.0-b48
yugabyte-dbeq2.18.4.0-b51
yugabyte-dbeq2.18.3.0-b35
yugabyte-dbeq2.18.2.0-b49
yugabyte-dbeq2.18.1.0-b40
yugabyte-dbeq2.18.4.0-b4
yugabyte-dbeq2.18.2.0-b77
yugabyte-dbeq2.18.3.0-b20
yugabyte-dbeq2.18.1.0-b90
yugabyte-dbeq2.18.1.0-b10

Name	Operator	Version
yugabyte-db	eq	2.18.3.0-b48
yugabyte-db	eq	2.18.4.0-b51
yugabyte-db	eq	2.18.3.0-b35
yugabyte-db	eq	2.18.2.0-b49
yugabyte-db	eq	2.18.1.0-b40
yugabyte-db	eq	2.18.4.0-b4
yugabyte-db	eq	2.18.2.0-b77
yugabyte-db	eq	2.18.3.0-b20
yugabyte-db	eq	2.18.1.0-b90
yugabyte-db	eq	2.18.1.0-b10

Rows per page:

1-10 of 3331

References

www.yugabyte.com/