1. Home
  2. CVE Database
  3. CVE-2023-4320
HIGH · 7.6

CVE-2023-4320

An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are v...

Vulnerability Description

An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity.

CVSS Score

7.6

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
HIGH
Availability
LOW

Affected Products

VendorProductVersions
RedhatSatellite< 6.13

Related Weaknesses (CWE)

CWE-613

References

FAQ

What is CVE-2023-4320?

CVE-2023-4320 is a vulnerability with a CVSS score of 7.6 (HIGH). An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are v...

How severe is CVE-2023-4320?

CVE-2023-4320 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-4320?

Check the references section above for vendor advisories and patch information. Affected products include: Redhat Satellite.