Information disclosure in Linuxfoundation Backstage
CVE-2023-6944
A flaw was found in the Red Hat Developer Hub (RHDH). The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gaining access to this token and depending on permissions, an attacker could push malicious code to repositories, delete resources in Git, revoke or generate new keys, and sign code illegitimately.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.006 (44.4th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 44th percentile — 44.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.006 · newest: 0.006 · change: 0.000
Affected products
- Linuxfoundation Backstage
- Red Hat Rhdh-1.1-Rhel-9 — versions 1.1-107.1724038966
- Red Hat Developer Hub
Weakness classification (CWE)
Public proof-of-concept exploits
References
- access.redhat.com/errata/RHBA-2024:5869 (vendor-advisory)
- access.redhat.com/security/cve/CVE-2023-6944 (vdb-entry, Vendor Advisory)
- bugzilla.redhat.com/show_bug.cgi (issue-tracking, Issue Tracking, Vendor Advisory)
Frequently asked questions
- What is CVE-2023-6944?
- CVE-2023-6944 is a medium-severity vulnerability in Linuxfoundation Backstage, classified under Generation of Error Message Containing Sensitive Information. CVSS score: 5.7/10. Published 2024-01-04.
- How severe is CVE-2023-6944?
- Medium severity. CVSS v3 base score is 5.7 out of 10.
- Is CVE-2023-6944 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.