CVE-2023-1636

2023-09-2400:00:00

ubuntu.com

openstack barbican

vulnerability

unauthorized access

data transmitted

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

AI Score

5.2

Confidence

High

EPSS

Percentile

14.0%

JSON

A vulnerability was found in OpenStack Barbican containers. This
vulnerability is only applicable to deployments that utilize an all-in-one
configuration. Barbican containers share the same CGROUP, USER, and NET
namespace with the host system and other OpenStack services. If any service
is compromised, it could gain access to the data transmitted to and from
Barbican.

Bugs

<https://bugzilla.redhat.com/show_bug.cgi?id=2181765>

Notes

Author	Note
mdeslaur	as of 2023-11-27, no details if this is a Red Hat specific issue or if it also applies to Debian/Ubuntu, see Red Hat bug Per Debian, this appears to be a Red Hat specific issue