CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-4640

The controller responsible for setting the logging level does not include any authorization checks to ensure the user is authenticated. This can be seen by noting that it extends Controller rather than AuthenticatedController and includes no further checks. This issue affects YugabyteDB Anywhere: from 2.0.0 through 2.17.3

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 23.1%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2023-4640

Yugabyte » Yugabytedb » Version: 2.0.0

cpe:2.3:a:yugabyte:yugabytedb:2.0.0
Yugabyte » Yugabytedb » Version: 2.0.1

cpe:2.3:a:yugabyte:yugabytedb:2.0.1
Yugabyte » Yugabytedb » Version: 2.0.10

cpe:2.3:a:yugabyte:yugabytedb:2.0.10
Yugabyte » Yugabytedb » Version: 2.0.11

cpe:2.3:a:yugabyte:yugabytedb:2.0.11
Yugabyte » Yugabytedb » Version: 2.0.2

cpe:2.3:a:yugabyte:yugabytedb:2.0.2
Yugabyte » Yugabytedb » Version: 2.0.3

cpe:2.3:a:yugabyte:yugabytedb:2.0.3
Yugabyte » Yugabytedb » Version: 2.0.5.2

cpe:2.3:a:yugabyte:yugabytedb:2.0.5.2
Yugabyte » Yugabytedb » Version: 2.0.5.5

cpe:2.3:a:yugabyte:yugabytedb:2.0.5.5
Yugabyte » Yugabytedb » Version: 2.0.5.7

cpe:2.3:a:yugabyte:yugabytedb:2.0.5.7
Yugabyte » Yugabytedb » Version: 2.0.6

cpe:2.3:a:yugabyte:yugabytedb:2.0.6
Yugabyte » Yugabytedb » Version: 2.0.7

cpe:2.3:a:yugabyte:yugabytedb:2.0.7
Yugabyte » Yugabytedb » Version: 2.0.8

cpe:2.3:a:yugabyte:yugabytedb:2.0.8
Yugabyte » Yugabytedb » Version: 2.0.9

cpe:2.3:a:yugabyte:yugabytedb:2.0.9
Yugabyte » Yugabytedb » Version: 2.1.0

cpe:2.3:a:yugabyte:yugabytedb:2.1.0
Yugabyte » Yugabytedb » Version: 2.1.1

cpe:2.3:a:yugabyte:yugabytedb:2.1.1
Yugabyte » Yugabytedb » Version: 2.1.10

cpe:2.3:a:yugabyte:yugabytedb:2.1.10
Yugabyte » Yugabytedb » Version: 2.1.2

cpe:2.3:a:yugabyte:yugabytedb:2.1.2
Yugabyte » Yugabytedb » Version: 2.1.3

cpe:2.3:a:yugabyte:yugabytedb:2.1.3
Yugabyte » Yugabytedb » Version: 2.1.4

cpe:2.3:a:yugabyte:yugabytedb:2.1.4
Yugabyte » Yugabytedb » Version: 2.1.5

cpe:2.3:a:yugabyte:yugabytedb:2.1.5
Yugabyte » Yugabytedb » Version: 2.1.6

cpe:2.3:a:yugabyte:yugabytedb:2.1.6
Yugabyte » Yugabytedb » Version: 2.1.8.1

cpe:2.3:a:yugabyte:yugabytedb:2.1.8.1
Yugabyte » Yugabytedb » Version: 2.1.8.2

cpe:2.3:a:yugabyte:yugabytedb:2.1.8.2
Yugabyte » Yugabytedb » Version: 2.1.9

cpe:2.3:a:yugabyte:yugabytedb:2.1.9
Yugabyte » Yugabytedb » Version: 2.11.0.0

cpe:2.3:a:yugabyte:yugabytedb:2.11.0.0
Yugabyte » Yugabytedb » Version: 2.11.1.0

cpe:2.3:a:yugabyte:yugabytedb:2.11.1.0
Yugabyte » Yugabytedb » Version: 2.11.2.0

cpe:2.3:a:yugabyte:yugabytedb:2.11.2.0
Yugabyte » Yugabytedb » Version: 2.12.1

cpe:2.3:a:yugabyte:yugabytedb:2.12.1
Yugabyte » Yugabytedb » Version: 2.12.2.0

cpe:2.3:a:yugabyte:yugabytedb:2.12.2.0
Yugabyte » Yugabytedb » Version: 2.12.3.0

cpe:2.3:a:yugabyte:yugabytedb:2.12.3.0
Yugabyte » Yugabytedb » Version: 2.12.4.2

cpe:2.3:a:yugabyte:yugabytedb:2.12.4.2
Yugabyte » Yugabytedb » Version: 2.12.5.0

cpe:2.3:a:yugabyte:yugabytedb:2.12.5.0
Yugabyte » Yugabytedb » Version: 2.12.6.0

cpe:2.3:a:yugabyte:yugabytedb:2.12.6.0
Yugabyte » Yugabytedb » Version: 2.12.6.1

cpe:2.3:a:yugabyte:yugabytedb:2.12.6.1
Yugabyte » Yugabytedb » Version: 2.12.7.0

cpe:2.3:a:yugabyte:yugabytedb:2.12.7.0
Yugabyte » Yugabytedb » Version: 2.12.8.0

cpe:2.3:a:yugabyte:yugabytedb:2.12.8.0
Yugabyte » Yugabytedb » Version: 2.12.9.0

cpe:2.3:a:yugabyte:yugabytedb:2.12.9.0
Yugabyte » Yugabytedb » Version: 2.12.9.1

cpe:2.3:a:yugabyte:yugabytedb:2.12.9.1
Yugabyte » Yugabytedb » Version: 2.13.0.0

cpe:2.3:a:yugabyte:yugabytedb:2.13.0.0
Yugabyte » Yugabytedb » Version: 2.13.0.1

cpe:2.3:a:yugabyte:yugabytedb:2.13.0.1
Yugabyte » Yugabytedb » Version: 2.13.1.0

cpe:2.3:a:yugabyte:yugabytedb:2.13.1.0
Yugabyte » Yugabytedb » Version: 2.13.2.0

cpe:2.3:a:yugabyte:yugabytedb:2.13.2.0
Yugabyte » Yugabytedb » Version: 2.14.0.0

cpe:2.3:a:yugabyte:yugabytedb:2.14.0.0
Yugabyte » Yugabytedb » Version: 2.14.1.0

cpe:2.3:a:yugabyte:yugabytedb:2.14.1.0
Yugabyte » Yugabytedb » Version: 2.14.14.0

cpe:2.3:a:yugabyte:yugabytedb:2.14.14.0
Yugabyte » Yugabytedb » Version: 2.15.0.0

cpe:2.3:a:yugabyte:yugabytedb:2.15.0.0
Yugabyte » Yugabytedb » Version: 2.15.0.1

cpe:2.3:a:yugabyte:yugabytedb:2.15.0.1
Yugabyte » Yugabytedb » Version: 2.15.1.0

cpe:2.3:a:yugabyte:yugabytedb:2.15.1.0
Yugabyte » Yugabytedb » Version: 2.15.2.0

cpe:2.3:a:yugabyte:yugabytedb:2.15.2.0
Yugabyte » Yugabytedb » Version: 2.15.2.1

cpe:2.3:a:yugabyte:yugabytedb:2.15.2.1
Yugabyte » Yugabytedb » Version: 2.15.3.0

cpe:2.3:a:yugabyte:yugabytedb:2.15.3.0
Yugabyte » Yugabytedb » Version: 2.15.3.2

cpe:2.3:a:yugabyte:yugabytedb:2.15.3.2
Yugabyte » Yugabytedb » Version: 2.16.0.0

cpe:2.3:a:yugabyte:yugabytedb:2.16.0.0
Yugabyte » Yugabytedb » Version: 2.16.0.1

cpe:2.3:a:yugabyte:yugabytedb:2.16.0.1
Yugabyte » Yugabytedb » Version: 2.16.1.0

cpe:2.3:a:yugabyte:yugabytedb:2.16.1.0
Yugabyte » Yugabytedb » Version: 2.16.1.1

cpe:2.3:a:yugabyte:yugabytedb:2.16.1.1
Yugabyte » Yugabytedb » Version: 2.16.2.0

cpe:2.3:a:yugabyte:yugabytedb:2.16.2.0
Yugabyte » Yugabytedb » Version: 2.16.3.0

cpe:2.3:a:yugabyte:yugabytedb:2.16.3.0
Yugabyte » Yugabytedb » Version: 2.16.4.0

cpe:2.3:a:yugabyte:yugabytedb:2.16.4.0
Yugabyte » Yugabytedb » Version: 2.16.5.0

cpe:2.3:a:yugabyte:yugabytedb:2.16.5.0
Yugabyte » Yugabytedb » Version: 2.16.6.0

cpe:2.3:a:yugabyte:yugabytedb:2.16.6.0
Yugabyte » Yugabytedb » Version: 2.16.6.1

cpe:2.3:a:yugabyte:yugabytedb:2.16.6.1
Yugabyte » Yugabytedb » Version: 2.16.8.0

cpe:2.3:a:yugabyte:yugabytedb:2.16.8.0
Yugabyte » Yugabytedb » Version: 2.17.0.0

cpe:2.3:a:yugabyte:yugabytedb:2.17.0.0
Yugabyte » Yugabytedb » Version: 2.17.1.0

cpe:2.3:a:yugabyte:yugabytedb:2.17.1.0
Yugabyte » Yugabytedb » Version: 2.17.2.0

cpe:2.3:a:yugabyte:yugabytedb:2.17.2.0
Yugabyte » Yugabytedb » Version: 2.17.3.0

cpe:2.3:a:yugabyte:yugabytedb:2.17.3.0
Yugabyte » Yugabytedb » Version: 2.2.0.0

cpe:2.3:a:yugabyte:yugabytedb:2.2.0.0
Yugabyte » Yugabytedb » Version: 2.2.2.0

cpe:2.3:a:yugabyte:yugabytedb:2.2.2.0
Yugabyte » Yugabytedb » Version: 2.2.3.0

cpe:2.3:a:yugabyte:yugabytedb:2.2.3.0
Yugabyte » Yugabytedb » Version: 2.2.4

cpe:2.3:a:yugabyte:yugabytedb:2.2.4
Yugabyte » Yugabytedb » Version: 2.2.5

cpe:2.3:a:yugabyte:yugabytedb:2.2.5
Yugabyte » Yugabytedb » Version: 2.2.6

cpe:2.3:a:yugabyte:yugabytedb:2.2.6
Yugabyte » Yugabytedb » Version: 2.2.7

cpe:2.3:a:yugabyte:yugabytedb:2.2.7
Yugabyte » Yugabytedb » Version: 2.3.0.0

cpe:2.3:a:yugabyte:yugabytedb:2.3.0.0
Yugabyte » Yugabytedb » Version: 2.3.1.0

cpe:2.3:a:yugabyte:yugabytedb:2.3.1.0
Yugabyte » Yugabytedb » Version: 2.3.2.0

cpe:2.3:a:yugabyte:yugabytedb:2.3.2.0
Yugabyte » Yugabytedb » Version: 2.3.3.0

cpe:2.3:a:yugabyte:yugabytedb:2.3.3.0
Yugabyte » Yugabytedb » Version: 2.4.0

cpe:2.3:a:yugabyte:yugabytedb:2.4.0
Yugabyte » Yugabytedb » Version: 2.4.1.0

cpe:2.3:a:yugabyte:yugabytedb:2.4.1.0
Yugabyte » Yugabytedb » Version: 2.4.2

cpe:2.3:a:yugabyte:yugabytedb:2.4.2
Yugabyte » Yugabytedb » Version: 2.4.3

cpe:2.3:a:yugabyte:yugabytedb:2.4.3
Yugabyte » Yugabytedb » Version: 2.4.4

cpe:2.3:a:yugabyte:yugabytedb:2.4.4
Yugabyte » Yugabytedb » Version: 2.4.5

cpe:2.3:a:yugabyte:yugabytedb:2.4.5
Yugabyte » Yugabytedb » Version: 2.5.0

cpe:2.3:a:yugabyte:yugabytedb:2.5.0
Yugabyte » Yugabytedb » Version: 2.5.1

cpe:2.3:a:yugabyte:yugabytedb:2.5.1
Yugabyte » Yugabytedb » Version: 2.5.2

cpe:2.3:a:yugabyte:yugabytedb:2.5.2
Yugabyte » Yugabytedb » Version: 2.5.3

cpe:2.3:a:yugabyte:yugabytedb:2.5.3
Yugabyte » Yugabytedb » Version: 2.5.3.1

cpe:2.3:a:yugabyte:yugabytedb:2.5.3.1
Yugabyte » Yugabytedb » Version: 2.5.3.4

cpe:2.3:a:yugabyte:yugabytedb:2.5.3.4
Yugabyte » Yugabytedb » Version: 2.6.0

cpe:2.3:a:yugabyte:yugabytedb:2.6.0
Yugabyte » Yugabytedb » Version: 2.6.0.0

cpe:2.3:a:yugabyte:yugabytedb:2.6.0.0
Yugabyte » Yugabytedb » Version: 2.6.1

cpe:2.3:a:yugabyte:yugabytedb:2.6.1
Yugabyte » Yugabytedb » Version: 2.6.1.1

cpe:2.3:a:yugabyte:yugabytedb:2.6.1.1
Yugabyte » Yugabytedb » Version: 2.6.15.0

cpe:2.3:a:yugabyte:yugabytedb:2.6.15.0
Yugabyte » Yugabytedb » Version: 2.6.16.0

cpe:2.3:a:yugabyte:yugabytedb:2.6.16.0
Yugabyte » Yugabytedb » Version: 2.6.17.0

cpe:2.3:a:yugabyte:yugabytedb:2.6.17.0
Yugabyte » Yugabytedb » Version: 2.6.18

cpe:2.3:a:yugabyte:yugabytedb:2.6.18
Yugabyte » Yugabytedb » Version: 2.6.2

cpe:2.3:a:yugabyte:yugabytedb:2.6.2
Yugabyte » Yugabytedb » Version: 2.6.3

cpe:2.3:a:yugabyte:yugabytedb:2.6.3
Yugabyte » Yugabytedb » Version: 2.6.4

cpe:2.3:a:yugabyte:yugabytedb:2.6.4
Yugabyte » Yugabytedb » Version: 2.6.5

cpe:2.3:a:yugabyte:yugabytedb:2.6.5
Yugabyte » Yugabytedb » Version: 2.7.0

cpe:2.3:a:yugabyte:yugabytedb:2.7.0
Yugabyte » Yugabytedb » Version: 2.7.1.1

cpe:2.3:a:yugabyte:yugabytedb:2.7.1.1
Yugabyte » Yugabytedb » Version: 2.7.2

cpe:2.3:a:yugabyte:yugabytedb:2.7.2
Yugabyte » Yugabytedb » Version: 2.8.0

cpe:2.3:a:yugabyte:yugabytedb:2.8.0
Yugabyte » Yugabytedb » Version: 2.8.1

cpe:2.3:a:yugabyte:yugabytedb:2.8.1
Yugabyte » Yugabytedb » Version: 2.8.2

cpe:2.3:a:yugabyte:yugabytedb:2.8.2
Yugabyte » Yugabytedb » Version: 2.8.3

cpe:2.3:a:yugabyte:yugabytedb:2.8.3
Yugabyte » Yugabytedb » Version: 2.8.4.0

cpe:2.3:a:yugabyte:yugabytedb:2.8.4.0
Yugabyte » Yugabytedb » Version: 2.8.5.0

cpe:2.3:a:yugabyte:yugabytedb:2.8.5.0
Yugabyte » Yugabytedb » Version: 2.8.6.0

cpe:2.3:a:yugabyte:yugabytedb:2.8.6.0
Yugabyte » Yugabytedb » Version: 2.8.7.0

cpe:2.3:a:yugabyte:yugabytedb:2.8.7.0
Yugabyte » Yugabytedb » Version: 2.8.8.0

cpe:2.3:a:yugabyte:yugabytedb:2.8.8.0
Yugabyte » Yugabytedb » Version: 2.9.0.0

cpe:2.3:a:yugabyte:yugabytedb:2.9.0.0
Yugabyte » Yugabytedb » Version: 2.9.1.0

cpe:2.3:a:yugabyte:yugabytedb:2.9.1.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-4640

Products

Pricing

Contact Us