CVE-2023-4320

An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity.

Score

CVSS 3.1 7.6 High

Status

Modified - secalert@redhat.com

Published

2023-12-18

Last modified

2025-11-20

Weaknesses

CWE-613

Affected products

• Satellite (Redhat)
• Satellite Capsule (Redhat)
• Satellite Maintenance (Redhat)
• Satellite Utils (Redhat)

References

• https://access.redhat.com/errata/RHSA-2024:2010
• https://access.redhat.com/security/cve/CVE-2023-4320
• https://bugzilla.redhat.com/show_bug.cgi?id=2231814