Language:
https://access.redhat.com/errata/RHSA-2023:3280
https://bugzilla.redhat.com/show_bug.cgi?id=2188333
https://bugzilla.redhat.com/show_bug.cgi?id=2188337
https://bugzilla.redhat.com/show_bug.cgi?id=2188338
https://access.redhat.com/security/updates/classification/#important
Severity: High
ID: 176256
File Name: redhat-RHSA-2023-3280.nasl
Version: 1.1
Type: local
Agent: unix
Family: Red Hat Local Security Checks
Published: 5/23/2023
Updated: 4/28/2024
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
Risk Factor: Medium
Score: 6.7
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.1
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:N
CVSS Score Source: CVE-2023-25652
Risk Factor: High
Base Score: 7.8
Temporal Score: 7
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
CVSS Score Source: CVE-2023-29007
CPE: cpe:/o:redhat:enterprise_linux:7, p-cpe:/a:redhat:enterprise_linux:rh-git227-git-gui, p-cpe:/a:redhat:enterprise_linux:rh-git227-git-core, p-cpe:/a:redhat:enterprise_linux:rh-git227-perl-git, p-cpe:/a:redhat:enterprise_linux:rh-git227-git-svn, p-cpe:/a:redhat:enterprise_linux:rh-git227-git-all, p-cpe:/a:redhat:enterprise_linux:rh-git227-git-cvs, p-cpe:/a:redhat:enterprise_linux:rh-git227-git-p4, p-cpe:/a:redhat:enterprise_linux:rh-git227-git-daemon, p-cpe:/a:redhat:enterprise_linux:rh-git227-git-email, p-cpe:/a:redhat:enterprise_linux:rh-git227-perl-git-svn, p-cpe:/a:redhat:enterprise_linux:rh-git227-gitk, p-cpe:/a:redhat:enterprise_linux:rh-git227-git-instaweb, p-cpe:/a:redhat:enterprise_linux:rh-git227-gitweb, p-cpe:/a:redhat:enterprise_linux:rh-git227-git-core-doc, p-cpe:/a:redhat:enterprise_linux:rh-git227-git-credential-libsecret, p-cpe:/a:redhat:enterprise_linux:rh-git227-git, p-cpe:/a:redhat:enterprise_linux:rh-git227-git-subtree
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 5/23/2023
Vulnerability Publication Date: 4/25/2023
CVE: CVE-2023-25652, CVE-2023-25815, CVE-2023-29007
RHSA: 2023:3280