CVE-2023-1636

Advisory

Barbican 17.0.0.0rc1 and prior versions are affected by CVE-2023-1636: A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is compromised, it could gain access to the data transmitted to and from Barbican.
https://bugzilla.redhat.com/show_bug.cgi?id=2181765

Affected package

Affected versions

Fixed versions

Vulnerability changelog

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is compromised, it could gain access to the data transmitted to and from Barbican. See CVE-2023-1636.


MISC:RHBZ#2181765: https://bugzilla.redhat.com/show_bug.cgi?id=2181765
MISC:https://access.redhat.com/security/cve/CVE-2023-1636: https://access.redhat.com/security/cve/CVE-2023-1636

Resources

• https://bugzilla.redhat.com/show_bug.cgi?id=2181765
• https://access.redhat.com/security/cve/CVE-2023-1636
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1636