Is CVE-2023-3128 in the CISA KEV catalog?

No. CVE-2023-3128 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2023-3128?

CVE-2023-3128 has a CVSS v3 base score of 9.4 (CRITICAL).

What is the EPSS score for CVE-2023-3128?

CVE-2023-3128 has an EPSS score of 4.00% (89th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2023-3128?

Upgrade ceph on rhel 8 to 2:18.2.1-194.el8cp or later. Fixes are available for 168 affected products.

CVE & CISA-KEV Catalog

CVE-2023-3128

CRITICALEPSS 89th pctl

9.4

CVSS v3

NVD

Description

Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app.

CWE-290

How to fix

Remediation Available

cephRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

cephRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-baseRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-baseRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-base-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-base-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-commonRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-commonRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-common-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-common-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-debugsourceRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-debugsourceRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-exporter-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-exporter-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-fuseRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-fuseRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-fuse-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-fuse-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-immutable-object-cacheRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-immutable-object-cacheRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-immutable-object-cache-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-immutable-object-cache-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-mds-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-mds-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-mgr-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-mgr-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-mibRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-mibRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-mon-client-nvmeof-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-mon-client-nvmeof-debuginfoRocky

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-mon-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-mon-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-osd-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-osd-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-radosgw-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-radosgw-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-resource-agentsRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-resource-agentsRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-selinuxRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-selinuxRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-test-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

ceph-test-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

cephadmRed Hat / RHEL

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

cephadmRocky

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

cephadm-ansibleRed Hat / RHEL

Fixed in:1:3.2.0-1.el9cpRHSA-2024:3925

cephadm-ansibleRocky

Fixed in:1:3.2.0-1.el9cpRHSA-2024:3925

cephfs-mirror-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

cephfs-mirror-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

cephfs-topRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

cephfs-topRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

gperftoolsRocky

Fixed in:1:2.7-9.el8cpRHSA-2024:3925

gperftoolsRed Hat / RHEL

Fixed in:1:2.7-9.el8cpRHSA-2024:3925

gperftools-debugsourceRocky

Fixed in:1:2.7-9.el8cpRHSA-2024:3925

gperftools-debugsourceRed Hat / RHEL

Fixed in:1:2.7-9.el8cpRHSA-2024:3925

gperftools-libsRed Hat / RHEL

Fixed in:1:2.7-9.el8cpRHSA-2024:3925

gperftools-libsRocky

Fixed in:1:2.7-9.el8cpRHSA-2024:3925

gperftools-libs-debuginfoRocky

Fixed in:1:2.7-9.el8cpRHSA-2024:3925

gperftools-libs-debuginfoRed Hat / RHEL

Fixed in:1:2.7-9.el8cpRHSA-2024:3925

grafanaRed Hat / RHEL

Fixed in:0:9.2.10-7.el8_9RHSA-2023:6972

Fixed in:0:9.0.9-3.el9_2RHSA-2023:4030

grafanaRocky

Fixed in:0:9.2.10-7.el8_9RHSA-2023:6972

Fixed in:0:9.0.9-3.el9_2RHSA-2023:4030

grafana-debuginfoRocky

Fixed in:0:9.2.10-7.el8_9RHSA-2023:6972

Fixed in:0:9.0.9-3.el9_2RHSA-2023:4030

grafana-debuginfoRed Hat / RHEL

Fixed in:0:9.2.10-7.el8_9RHSA-2023:6972

Fixed in:0:9.0.9-3.el9_2RHSA-2023:4030

grafana-debugsourceRocky

Fixed in:0:9.2.10-7.el8_9RHSA-2023:6972

Fixed in:0:9.0.9-3.el9_2RHSA-2023:4030

grafana-debugsourceRed Hat / RHEL

Fixed in:0:9.2.10-7.el8_9RHSA-2023:6972

Fixed in:0:9.0.9-3.el9_2RHSA-2023:4030

libcephfs-develRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

libcephfs-develRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

libcephfs2Rocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

libcephfs2Red Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

libcephfs2-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

libcephfs2-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

libcephsqlite-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

libcephsqlite-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

liboathRed Hat / RHEL

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

liboathRocky

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

liboath-debuginfoRed Hat / RHEL

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

liboath-debuginfoRocky

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

libpskc-debuginfoRocky

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

libpskc-debuginfoRed Hat / RHEL

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

librados-develRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librados-develRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librados-devel-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librados-devel-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librados2Rocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librados2Red Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librados2-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librados2-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

libradospp-develRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

libradospp-develRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

libradosstriper1Red Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

libradosstriper1Rocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

libradosstriper1-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

libradosstriper1-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librbd-develRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librbd-develRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librbd1Rocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librbd1Red Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librbd1-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librbd1-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librgw-develRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librgw-develRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librgw2Rocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librgw2Red Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librgw2-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

librgw2-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

libunwindRed Hat / RHEL

Fixed in:0:1.3.1-3.el8cpRHSA-2024:3925

libunwindRocky

Fixed in:0:1.3.1-3.el8cpRHSA-2024:3925

libunwind-debuginfoRed Hat / RHEL

Fixed in:0:1.3.1-3.el8cpRHSA-2024:3925

libunwind-debuginfoRocky

Fixed in:0:1.3.1-3.el8cpRHSA-2024:3925

libunwind-debugsourceRocky

Fixed in:0:1.3.1-3.el8cpRHSA-2024:3925

libunwind-debugsourceRed Hat / RHEL

Fixed in:0:1.3.1-3.el8cpRHSA-2024:3925

oath-toolkitRocky

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

oath-toolkitRed Hat / RHEL

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

oath-toolkit-debuginfoRed Hat / RHEL

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

oath-toolkit-debuginfoRocky

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

oath-toolkit-debugsourceRed Hat / RHEL

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

oath-toolkit-debugsourceRocky

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

oathtool-debuginfoRocky

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

oathtool-debuginfoRed Hat / RHEL

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

pam_oath-debuginfoRocky

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

pam_oath-debuginfoRed Hat / RHEL

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

pskctool-debuginfoRocky

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

pskctool-debuginfoRed Hat / RHEL

Fixed in:0:2.6.2-3.el8cpRHSA-2024:3925

python3-ceph-argparseRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-ceph-argparseRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-ceph-commonRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-ceph-commonRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-cephfsRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-cephfsRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-cephfs-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-cephfs-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-radosRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-radosRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-rados-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-rados-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-rbdRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-rbdRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-rbd-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-rbd-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-rgwRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-rgwRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-rgw-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-rgw-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

python3-thrift-debuginfoRocky

Fixed in:0:0.13.0-2.el8cpRHSA-2024:3925

python3-thrift-debuginfoRed Hat / RHEL

Fixed in:0:0.13.0-2.el8cpRHSA-2024:3925

rbd-fuse-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

rbd-fuse-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

rbd-mirror-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

rbd-mirror-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

rbd-nbdRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

rbd-nbdRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

rbd-nbd-debuginfoRocky

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

rbd-nbd-debuginfoRed Hat / RHEL

Fixed in:2:18.2.1-194.el8cpRHSA-2024:3925

Fixed in:2:18.2.1-194.el9cpRHSA-2024:3925

thriftRocky

Fixed in:0:0.13.0-2.el8cpRHSA-2024:3925

thriftRed Hat / RHEL

Fixed in:0:0.13.0-2.el8cpRHSA-2024:3925

thrift-debuginfoRocky

Fixed in:0:0.13.0-2.el8cpRHSA-2024:3925

thrift-debuginfoRed Hat / RHEL

Fixed in:0:0.13.0-2.el8cpRHSA-2024:3925

thrift-debugsourceRed Hat / RHEL

Fixed in:0:0.13.0-2.el8cpRHSA-2024:3925

thrift-debugsourceRocky

Fixed in:0:0.13.0-2.el8cpRHSA-2024:3925

thrift-devel-debuginfoRed Hat / RHEL

Fixed in:0:0.13.0-2.el8cpRHSA-2024:3925

thrift-devel-debuginfoRocky

Fixed in:0:0.13.0-2.el8cpRHSA-2024:3925

thrift-glib-debuginfoRed Hat / RHEL

Fixed in:0:0.13.0-2.el8cpRHSA-2024:3925

thrift-glib-debuginfoRocky

Fixed in:0:0.13.0-2.el8cpRHSA-2024:3925

thrift-qt-debuginfoRed Hat / RHEL

Fixed in:0:0.13.0-2.el8cpRHSA-2024:3925

thrift-qt-debuginfoRocky

Fixed in:0:0.13.0-2.el8cpRHSA-2024:3925

GrafanaEnterpriseWindows application

Affected:9.4.0 9.4.13Fixed in:9.4.13Grafana Labs

Affected:9.3.0 9.3.16Fixed in:9.3.16Grafana Labs

Affected:9.5.0 9.5.4Fixed in:9.5.4Grafana Labs

Affected:9.2.0 9.2.20Fixed in:9.2.20Grafana Labs

Affected:6.7.0 8.5.27Fixed in:8.5.27Grafana Labs

GrafanaOSSWindows application

Affected:6.7.0 8.5.27Fixed in:8.5.27Grafana Labs

Affected:9.2.0 9.2.20Fixed in:9.2.20Grafana Labs

Affected:9.3.0 9.3.16Fixed in:9.3.16Grafana Labs

Affected:9.5.0 9.5.4Fixed in:9.5.4Grafana Labs

Affected:9.4.0 9.4.13Fixed in:9.4.13Grafana Labs

TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityLow

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Exploit Intelligence

4.00%probability of exploitation in 30 days

89thpercentile

Elevated risk: more likely to be exploited than 89% of all known CVEs.

References

Vendor Advisory2

Third-Party Advisory1

security.netapp.com

Related Vulnerabilities

Other CWE-290 vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2024-4358	Critical	9.8	97%	KEV	-
CVE-2022-24112	Critical	9.8	96%	KEV	Fix
CVE-2022-23131	Critical	9.1	96%	KEV	-
CVE-2021-29441	High	8.6	74%	-	Fix
CVE-2021-31195	Medium	6.5	74%	-	Fix
CVE-2020-7388	Critical	10.0	70%	-	Fix

Embed a live status badge for CVE-2023-3128

Markdown

[![CVE-2023-3128](https://tridentstack.com/cve/badge/CVE-2023-3128.svg)](https://tridentstack.com/cve/CVE-2023-3128)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-3128"><img src="https://tridentstack.com/cve/badge/CVE-2023-3128.svg" alt="CVE-2023-3128"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

See how it works Start freeThis CVE lookup is free and always will be.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-02-13.