PyPi: Designate

CVE-2023-6725

Safety vulnerability ID: 71381

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Mar 15, 2024 Updated at Nov 29, 2024

Scan your Python projects for vulnerabilities →

Advisory

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

Affected package

designate

Latest version: 19.0.0

DNS as a Service

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

https://access.redhat.com/security/cve/CVE-2023-6725
https://github.com/advisories/GHSA-pv5w-g537-v27f
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6725
https://access.redhat.com/security/cve/CVE-2023-6725

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application