CVE-2023-50976: Critical severity redpanda vulnerability
Published Dec 17, 2023
·Updated
Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API.
Affected Software
2 affected components
Redpanda Redpanda<23.1.21
Redpanda Redpanda>=23.2.0<23.2.18
Remediation
Patch Available
Patch Available
Event History
Dec 17, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-50976?
CVE-2023-50976 has been classified with a severity that indicates a significant risk due to missing authorization checks.
2
How do I fix CVE-2023-50976?
To fix CVE-2023-50976, upgrade Redpanda to version 23.1.21 or later, or to version 23.2.18 or later.
3
What does CVE-2023-50976 affect?
CVE-2023-50976 affects Redpanda versions prior to 23.1.21 and versions in the 23.2.x series before 23.2.18.
4
What could happen if CVE-2023-50976 is exploited?
Exploitation of CVE-2023-50976 could allow unauthorized access to the Transactions API, potentially compromising data integrity.
5
When was CVE-2023-50976 published?
CVE-2023-50976 was published in late 2023 as a result of identified vulnerabilities in the Redpanda software.