CVE-2023-32198
- Source
- https://cve.org/CVERecord?id=CVE-2023-32198
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-32198.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2023-32198
- Aliases
- Downstream
CGA (30)
- CGA-2p4p-pvvh-gw4r
- CGA-3ccw-xjf3-w7c3
- CGA-3fqj-v2x4-hfqj
- CGA-3jp8-mgxm-jxpc
- CGA-44c7-22j7-hqqf
- CGA-4rv6-rrh7-3fwr
- CGA-52cv-p686-qfr4
- CGA-52g5-prpc-76rq
- CGA-54cp-3rxm-5m6g
- CGA-6p5x-v34m-p75q
- CGA-7gjh-c89c-h8j4
- CGA-7x99-363j-rq5f
- CGA-fhj8-4x53-v7qh
- CGA-fhxc-6qg3-4f5h
- CGA-g58j-67qx-wc29
- CGA-grj9-v867-f7wr
- CGA-h5jg-835q-65fx
- CGA-hfvg-vmvv-6gmf
- CGA-j3c3-23gc-2mhv
- CGA-j7fc-vfhm-9v2c
- CGA-j855-r77m-3mqx
- CGA-mmcx-x9cf-8p2w
- CGA-p692-p6vp-vw3h
- CGA-ppv4-m422-283r
- CGA-q3q3-jj3w-cm8f
- CGA-qqgc-m4j4-j9m6
- CGA-rh99-qv33-c3wr
- CGA-rqcx-rpc8-x68q
- CGA-vx9g-6g5j-7mjr
- CGA-xm6w-p545-qc3f
openSUSE (1)
- Related
- Published
- 2026-10-15T08:22:47Z
- Modified
- 2026-10-24T10:31:57Z
- Severity
-
- 8.0 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks
- Details
-
A vulnerability has been identified in Steve where by default it was using an insecure option that did not validate the certificate presented by the remote server while performing a TLS connection. This could allow the execution of a man-in-the-middle (MitM) attack against services using Steve.
- Database specific
{ "cna_assigner": "suse", "cwe_ids": [ "CWE-295" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/32xxx/CVE-2023-32198.json" }- References
Affected packages
Git / github.com/rancher/steve
Affected ranges
- Type
- GIT
- Repo
- https://github.com/rancher/steve
- Events
-
IntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "0.2.0" }, { "fixed": "0.2.1" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "0.3.0" }, { "fixed": "0.3.3" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "0.4.0" }, { "fixed": "0.4.4" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "0.5.0" }, { "fixed": "0.5.13" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" } ] }