CVE-2023-1633

Advisory

Barbican 17.0.0.0rc1 and prior versions are affected by CVE-2023-1633: A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials.
https://bugzilla.redhat.com/show_bug.cgi?id=2181761

Affected package

Affected versions

Fixed versions

Vulnerability changelog

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials. See CVE-2023-1633.


MISC:RHBZ#2181761: https://bugzilla.redhat.com/show_bug.cgi?id=2181761
MISC:https://access.redhat.com/security/cve/CVE-2023-1633: https://access.redhat.com/security/cve/CVE-2023-1633

Resources

• https://bugzilla.redhat.com/show_bug.cgi?id=2181761
• https://access.redhat.com/security/cve/CVE-2023-1633
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1633