(RHSA-2023:6231) Moderate: Red Hat OpenStack Platform 16.2 (openstack-barbican) security update

2023-11-0819:04:41

access.redhat.com

barbican

openstack

security update

credential leaking fix

cve-2023-1633

rest api

secrets management

CVSS3

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

AI Score

7.3

Confidence

Low

EPSS

Percentile

5.1%

JSON

Barbican is a ReST API designed for the secure storage, provisioning and
management of secrets, including in OpenStack environments.

Security Fix(es):

Insecure Barbican configuration file leaking credential (CVE-2023-1633)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8noarchopenstack-barbican-keystone-listener< 9.0.2-2.20230515185056.1cd585c.el8ostopenstack-barbican-keystone-listener-9.0.2-2.20230515185056.1cd585c.el8ost.noarch.rpm
RedHat8noarchopenstack-barbican-worker< 9.0.2-2.20230515185056.1cd585c.el8ostopenstack-barbican-worker-9.0.2-2.20230515185056.1cd585c.el8ost.noarch.rpm
RedHat8noarchopenstack-barbican< 9.0.2-2.20230515185056.1cd585c.el8ostopenstack-barbican-9.0.2-2.20230515185056.1cd585c.el8ost.noarch.rpm
RedHat8noarchpython3-barbican< 9.0.2-2.20230515185056.1cd585c.el8ostpython3-barbican-9.0.2-2.20230515185056.1cd585c.el8ost.noarch.rpm
RedHat8noarchopenstack-barbican-common< 9.0.2-2.20230515185056.1cd585c.el8ostopenstack-barbican-common-9.0.2-2.20230515185056.1cd585c.el8ost.noarch.rpm
RedHat8noarchopenstack-barbican-api< 9.0.2-2.20230515185056.1cd585c.el8ostopenstack-barbican-api-9.0.2-2.20230515185056.1cd585c.el8ost.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	noarch	openstack-barbican-keystone-listener	< 9.0.2-2.20230515185056.1cd585c.el8ost	openstack-barbican-keystone-listener-9.0.2-2.20230515185056.1cd585c.el8ost.noarch.rpm
RedHat	8	noarch	openstack-barbican-worker	< 9.0.2-2.20230515185056.1cd585c.el8ost	openstack-barbican-worker-9.0.2-2.20230515185056.1cd585c.el8ost.noarch.rpm
RedHat	8	noarch	openstack-barbican	< 9.0.2-2.20230515185056.1cd585c.el8ost	openstack-barbican-9.0.2-2.20230515185056.1cd585c.el8ost.noarch.rpm
RedHat	8	noarch	python3-barbican	< 9.0.2-2.20230515185056.1cd585c.el8ost	python3-barbican-9.0.2-2.20230515185056.1cd585c.el8ost.noarch.rpm
RedHat	8	noarch	openstack-barbican-common	< 9.0.2-2.20230515185056.1cd585c.el8ost	openstack-barbican-common-9.0.2-2.20230515185056.1cd585c.el8ost.noarch.rpm
RedHat	8	noarch	openstack-barbican-api	< 9.0.2-2.20230515185056.1cd585c.el8ost	openstack-barbican-api-9.0.2-2.20230515185056.1cd585c.el8ost.noarch.rpm