CVE-2023-4320CWE-613

Satellite: arithmetic overflow in satellite

High · published December 18, 2023

CVSS v3.1
7.6
EPSS
1%
Percentile
50.7
In the wild
Unconfirmed
What it is

An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00653 · 50.7th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2023-12-18T13:43Z
EPSS history
Timeline
  • 18 DEC 13:43Z
    Satellite: arithmetic overflow in satellite
    cvelistv5