{"id":"EUVD-2023-60719","revision":"733016be1f3741b3b904c8a05cf05816","records":[{"revision":"733016be1f3741b3b904c8a05cf05816","observedAt":"2026-11-01T22:57:58.111+00:00","statement":{"source":"euvd","id":"EUVD-2023-60719","aliases":["CVE-2023-32198","GHSA-95fc-g4gj-mqmx"],"title":"A vulnerability has been identified in Steve where by default it was using an insecure option that did not validate the certificate presented by the remote server while performing a TLS connection. This could allow the execution of a man-in…","description":"A vulnerability has been identified in Steve where by default it was using an insecure option that did not validate the certificate presented by the remote server while performing a TLS connection. This could allow the execution of a man-in-the-middle (MitM) attack against services using Steve.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","score":8,"severity":null}],"references":["https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32198","https://github.com/rancher/steve/security/advisories/GHSA-95fc-g4gj-mqmx"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-60719","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Oct 15, 2026, 8:22:47 AM","dateUpdated":"Oct 15, 2026, 7:58:21 PM"},"relatedAdvisories":[{"id":"openSUSE-SU-2025:15059-1","title":"govulncheck-vulndb-0.0.20250506T153719-1.1 on GA media","vulnerabilityIds":["CVE-2019-11243","CVE-2023-32198","CVE-2024-22031","CVE-2025-23390","CVE-2025-32777","CVE-2025-3879","CVE-2025-4166","CVE-2025-4210","CVE-2025-46327","CVE-2025-46342","CVE-2025-46569","CVE-2025-46599"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2023-60719","identifiers":["EUVD-2023-60719","CVE-2023-32198","GHSA-95fc-g4gj-mqmx"]},"retained":false,"historicalAffected":[]}],"coverage":[]}