CVE-2023-1636
First published: Sat Mar 25 2023(Updated: )
A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is compromised, it could gain access to the data transmitted to and from Barbican.
Credit: secalert@redhat.com secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenStack Barbican | ||
| Redhat Openstack Platform | =16.1 | |
| Redhat Openstack Platform | =16.2 | |
| Redhat Openstack Platform | =17.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this OpenStack Barbican vulnerability?
The vulnerability ID for this OpenStack Barbican vulnerability is CVE-2023-1636.
What is the severity of CVE-2023-1636?
The severity of CVE-2023-1636 is medium (6 out of 10).
Which versions of OpenStack Barbican are affected by CVE-2023-1636?
Versions up to and including 16.0.0 of OpenStack Barbican are affected by CVE-2023-1636.
How is the vulnerability CVE-2023-1636 exploited?
The vulnerability CVE-2023-1636 is exploited when an attacker compromises any service within the same CGROUP, USER, and NET namespace as the Barbican containers.
Are there any references for CVE-2023-1636?
Yes, you can find references for CVE-2023-1636 at the following links: [link1](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2188735), [link2](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2181765#c0), [link3](https://access.redhat.com/security/cve/CVE-2023-1636).
- collector/nvd-api
- collector/nvd-cve
- collector/nvd-index
- collector/github-advisory
- alias/GHSA-6rx9-c2rh-3qv4
- alias/CVE-2023-1636
- collector/github-advisory-latest
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- vendor/openstack
- canonical/openstack barbican
- vendor/redhat
- canonical/redhat openstack platform
- version/redhat openstack platform/16.1
- version/redhat openstack platform/16.2
- version/redhat openstack platform/17.0
- package-manager/pip