CVE-2023-4320
Satellite: arithmetic overflow in satellite
- State
- Published
- Severity
- 7.6 High
- Published
- Dec 18, 2023
- Updated
- Nov 20, 2025
- Reserved
- Aug 14, 2023
Description
An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.6 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L | redhat |
Weaknesses
- CWE-613 Insufficient Session Expiration
Affected Products
| Product | Versions |
|---|---|
Red Hat Satellite 6.15 for RHEL 8Red Hat |
|
Red Hat Satellite 6.15 for RHEL 8Red Hat |
|
Red Hat Satellite 6.15 for RHEL 8Red Hat |
|
References
- RHSA-2024:2010vendor-advisory
- https://access.redhat.com/security/cve/CVE-2023-4320vdb-entry
- RHBZ#2231814issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.