CVE-2023-0574

yugabytedb managed

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-0574

Katalog CVE

CVSS 9.8 · Critical EPSS 0,64%

Kerentanan Improper Restriction of Excessive Authentication Attempts pada yugabytedb managed. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc. Yugabyte Managed allows Accessing Functionality Not Properly Constrained by ACLs, Communication Channel Manipulation, Authentication Abuse.This issue affects Yugabyte Managed: from 2.0.0.0 through 2.13.0.0

Rincian

Terbit di NVD
9 Februari 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-307: Improper Restriction of Excessive Authentication Attempts
CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes
CWE-918: Server-Side Request Forgery (SSRF)
EPSS (30 hari)
0,64% peluang dieksploitasi; lebih tinggi dari 49,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
yugabyte yugabytedb managed Versi 2.0 hingga 2.13

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.