Lucene search
PRIOn knowledge basePRION:CVE-2023-4640HistoryAug 30, 2023 - 5:15 p.m.
Authorization
2023-08-3017:15:00
PRIOn knowledge base
www.prio-n.com
2
controller
authorization
logging level
authentication
yugabytedb anywhere
nvd
0.001 Low
EPSS
Percentile
37.3%
The controller responsible for setting the logging level does not include any authorization
checks to ensure the user is authenticated. This can be seen by noting that it extends
Controller rather than AuthenticatedController and includes no further checks. This issue affects YugabyteDB Anywhere: from 2.0.0 through 2.17.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| yugabytedb | ge | 2.0.0 | |
| yugabytedb | le | 2.17.3.0 |
References
Related
osv
osv
CVE-2023-4640
2023-08-30 17:15:11
cve
cve
CVE-2023-4640
2023-08-30 17:15:11
cvelist
cvelist
CVE-2023-4640 Set Logging Level Without Authentication
2023-08-30 16:42:45
nvd
nvd
CVE-2023-4640
2023-08-30 17:15:11