CVE-2023-32198

Publié : 15 octobre 2026

Modifié : 15 octobre 2026

Score CVSS

HIGH

Description détaillée

A vulnerability has been identified in Steve where by default it was using an insecure option that did not validate the certificate presented by the remote server while performing a TLS connection. This could allow the execution of a man-in-the-middle (MitM) attack against services using Steve.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Références et Patchs

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32198 https://github.com/rancher/steve/security/advisories/GHSA-95fc-g4gj-mqmx

Dernières Vulnérabilités

CVE-2026-79829

A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.

VOIR DÉTAILS

CVE-2026-79828

A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.

VOIR DÉTAILS

CVE-2026-79827

A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.

VOIR DÉTAILS