CVE-2023-1636: Incomplete container isolation
First published: Sat Mar 25 2023(Updated: )
A container isolation flaw was discovered in Red Hat OpenStack, allowing an attacker with limited authentication and access to Barbican containers to potentially access other OpenStack containers and services. This is possible as they share common CGROUP and namespace.
Credit: secalert@redhat.com secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenStack Barbican | ||
| Redhat Openstack Platform | =16.1 | |
| Redhat Openstack Platform | =16.2 | |
| Redhat Openstack Platform | =17.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this OpenStack Barbican vulnerability?
The vulnerability ID for this OpenStack Barbican vulnerability is CVE-2023-1636.
What is the severity of CVE-2023-1636?
The severity of CVE-2023-1636 is medium (6 out of 10).
Which versions of OpenStack Barbican are affected by CVE-2023-1636?
Versions up to and including 16.0.0 of OpenStack Barbican are affected by CVE-2023-1636.
How is the vulnerability CVE-2023-1636 exploited?
The vulnerability CVE-2023-1636 is exploited when an attacker compromises any service within the same CGROUP, USER, and NET namespace as the Barbican containers.
Are there any references for CVE-2023-1636?
Yes, you can find references for CVE-2023-1636 at the following links: [link1](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2188735), [link2](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2181765#c0), [link3](https://access.redhat.com/security/cve/CVE-2023-1636).
- collector/github-advisory-latest
- alias/GHSA-6rx9-c2rh-3qv4
- alias/CVE-2023-1636
- collector/github-advisory
- collector/nvd-api
- collector/nvd-index
- collector/nvd-cve
- agent/type
- agent/first-publish-date
- agent/references
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/title
- agent/severity
- agent/event
- agent/description
- agent/tags
- collector/redhat-bugzilla
- source/Red Hat
- package-manager/pip
- vendor/openstack
- canonical/openstack barbican
- vendor/redhat
- canonical/redhat openstack platform
- version/redhat openstack platform/16.1
- version/redhat openstack platform/16.2
- version/redhat openstack platform/17.0