Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS02cng5LWMycmgtM3F2NM4AA2A7

OpenStack Barbican information disclosure vulnerability

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is compromised, it could gain access to the data transmitted to and from Barbican.

Permalink: https://github.com/advisories/GHSA-6rx9-c2rh-3qv4
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02cng5LWMycmgtM3F2NM4AA2A7
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: about 1 year ago
Updated: about 1 year ago

CVSS Score: 6.0
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

EPSS Percentage: 0.00062
EPSS Percentile: 0.27517

Identifiers: GHSA-6rx9-c2rh-3qv4, CVE-2023-1636
References:

• https://nvd.nist.gov/vuln/detail/CVE-2023-1636
• https://access.redhat.com/security/cve/CVE-2023-1636
• https://bugzilla.redhat.com/show_bug.cgi?id=2181765
• https://github.com/advisories/GHSA-6rx9-c2rh-3qv4

Blast Radius: 2.9

Affected Packages