Lucene search
Redhat.comRH:CVE-2023-40175HistoryAug 22, 2023 - 5:50 p.m.
CVE-2023-40175
2023-08-2217:50:39
redhat.com
access.redhat.com
101
cve-2023-40175
http request smuggling
rubygem puma
unauthorized access
sensitive data
inconsistent interpretation
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
65.2%
An HTTP request smuggling attack vulnerability was found in Rubygem Puma. This flaw allows an attacker to gain unauthorized access to sensitive data due to an inconsistent interpretation of HTTP requests.
Related
osv
osv
Puma HTTP Request/Response Smuggling vulnerability
2023-08-18 21:50:05
CVE-2023-40175
2023-08-18 22:15:11
puma vulnerabilities
2024-03-07 14:00:06
veracode
veracode
HTTP Request Smuggling
2023-08-22 14:17:09
ubuntu
ubuntu
Puma vulnerability
2023-09-27 00:00:00
Puma vulnerabilities
2024-03-07 00:00:00
debiancve
debiancve
CVE-2023-40175
2023-08-18 22:15:11
github
github
Puma HTTP Request/Response Smuggling vulnerability
2023-08-18 21:50:05
ubuntucve
ubuntucve
CVE-2023-40175
2023-08-18 00:00:00
cvelist
cvelist
CVE-2023-40175 Inconsistent Interpretation of HTTP Requests in puma
2023-08-18 21:35:47
nessus
nessus
Ubuntu 23.04 : Puma vulnerability (USN-6399-1)
2023-09-27 00:00:00
Fedora 40 : rubygem-puma (2024-c393b8b2fb)
2024-04-29 00:00:00
prion
prion
Design/Logic Flaw
2023-08-18 22:15:00
openvas
openvas
Ubuntu: Security Advisory (USN-6399-1)
2023-09-27 00:00:00
openSUSE: Security Advisory for rubygem (SUSE-SU-2023:3957-1)
2024-03-04 00:00:00
Ubuntu: Security Advisory (USN-6682-1)
2024-03-08 00:00:00
nvd
nvd
CVE-2023-40175
2023-08-18 22:15:11
cve
cve
CVE-2023-40175
2023-08-18 22:15:11
redhat
redhat
(RHSA-2024:0797) Important: Satellite 6.14.2 Async Security Update
2024-02-13 14:38:17
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
65.2%
Related for RH:CVE-2023-40175