{"id":"CVE-2023-6725","aliases":["EUVD-2023-58939","GHSA-pv5w-g537-v27f","RHSA-2024:2736","RHSA-2024:2770"],"status":"published","title":"Tripleo-ansible: bind keys are world readable","description":"An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00201,"percentile":0.10016,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1220"],"published":"2024-03-15T12:38:23Z","modified":"2026-06-17T06:51:18Z","fixes":[{"ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-tripleo-heat-templates","fixed_in":["0:14.3.1-17.1.20231103010840.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"tripleo-ansible","fixed_in":["0:3.3.1-17.1.20231101230831.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el8","package":"openstack-tripleo-heat-templates","fixed_in":["0:14.3.1-17.1.20231103003762.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el8","package":"tripleo-ansible","fixed_in":["0:3.3.1-17.1.20231101233754.el8ost"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"openstack-tripleo-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:14.3.1-17.1.20231103010840.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"tripleo-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-17.1.20231101230831.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el8","package":"openstack-tripleo-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:14.3.1-17.1.20231103003762.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el8","package":"tripleo-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-17.1.20231101233754.el8ost"}]}]}],"products":[{"vendor":"red hat","product":"red hat openstack platform 16.1"},{"vendor":"red hat","product":"red hat openstack platform 16.2"},{"vendor":"red hat","product":"red hat openstack platform 17.1"},{"vendor":"red hat","product":"red hat openstack platform 17.1 for rhel 8"},{"vendor":"red hat","product":"red hat openstack platform 17.1 for rhel 9"},{"vendor":"red hat","product":"red hat openstack platform 18.0"},{"vendor":"redhat","product":"openstack_platform"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:2736","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2770","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6725","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Vendor Advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249273","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6725","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pv5w-g537-v27f"},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1900663","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2250940","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255114","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256780","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259286","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2260304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266206","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274010","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2736.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-6725","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2770.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-6725","title":"Tripleo-ansible: bind keys are world readable","description":"An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.","status":"published","published":"2024-03-15T12:38:23.158Z","modified":"2026-02-25T18:20:14.71Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-1220"],"updated_at":"2026-11-02T14:35:25.469654Z"}],"euvd":[{"id":"EUVD-2023-58939","description":"An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.","status":"published","published":"2024-03-15T12:38:23Z","modified":"2026-02-25T18:20:14Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:48:28.530473Z"}],"ghsa":[{"id":"GHSA-pv5w-g537-v27f","title":"An access-control flaw was found in the OpenStack Designate component where private configuration...","description":"An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.","status":"published","published":"2024-03-15T15:30:42Z","modified":"2024-05-23T00:30:37Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","level":"medium"}],"cwes":["CWE-1220"],"updated_at":"2026-11-02T14:57:23.839378Z"}],"nvd":[{"id":"CVE-2023-6725","description":"An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.","status":"published","published":"2024-03-15T13:15:06.857Z","modified":"2026-06-17T06:51:18.43Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-1220"],"updated_at":"2026-11-02T14:09:10.192572Z"}],"osv":[{"id":"RHSA-2024:2736","title":"Red Hat Security Advisory: openstack-tripleo-heat-templates and tripleo-ansible update","status":"published","published":"2024-09-16T18:30:52Z","modified":"2026-02-26T10:12:55Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2770","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (tripleo-ansible and openstack-tripleo-heat-templates) security update","status":"published","published":"2024-09-16T18:31:00Z","modified":"2026-02-26T10:12:57Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"}]}}