CVE-2023-6110— Openstack: deleting a non existing access rule deletes another existing access rule in it's scope

Quick assessment

Affected

Red Hat Red Hat OpenStack Platform 17.1 for RHEL 8

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

OpenStack是美国美国国家航空航天局（NASA）的一个云平台管理项目。 OpenStack存在安全漏洞，该漏洞源于当用户尝试删除其范围内不存在的访问规则时，它会删除与任何应用程序凭据无关的其他现有访问规则。

CVSS 5.5 · Medium EPSS 0.52% · P45 Updated Feb 26, 2026

Possible ATT&CK Techniques 1 AI

T1530 · Data from Cloud Storage

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-6110

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Openstack: deleting a non existing access rule deletes another existing access rule in it's scope

Source: CVE Program / CVE List V5

Vulnerability Description

A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

结构体元素处理不恰当

Source: CVE Program / CVE List V5

Vulnerability Title

OpenStack 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 8	0:5.5.2-17.1.20230829213816.el8ost ~ *	`cpe:/a:redhat:openstack:17.1::el8`
Red Hat	Red Hat OpenStack Platform 17.1 for RHEL 9	0:5.5.2-17.1.20230829210830.el9ost ~ *	`cpe:/a:redhat:openstack:17.1::el9`
Red Hat	Red Hat OpenStack Platform 16.1	-	`cpe:/a:redhat:openstack:16.1`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 17.0	-	`cpe:/a:redhat:openstack:17.0`
Red Hat	Red Hat OpenStack Platform 18.0	-	`cpe:/a:redhat:openstack:18.0`