CVE-2023-1636

Опубликовано: 24 сент. 2023

Источник: nvd

CVSS3: 6

CVSS3: 5

EPSS Низкий

Описание

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is compromised, it could gain access to the data transmitted to and from Barbican.

Ссылки

https://access.redhat.com/security/cve/CVE-2023-1636
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2181765
Issue Tracking
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-1636
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2181765
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openstack:barbican:-:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openstack_platform:16.2:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openstack_platform:17.0:*:*:*:*:*:*:*

EPSS

Процентиль: 22%

0.00074

Низкий

6 Medium

CVSS3

5 Medium

CVSS3

Дефекты

CWE-653

NVD-CWE-noinfo

Связанные уязвимости

CVE-2023-1636

CVSS3: 6

ubuntu

больше 2 лет назад

CVE-2023-1636

CVSS3: 6

redhat

почти 3 года назад

CVE-2023-1636

CVSS3: 6

debian

больше 2 лет назад

A vulnerability was found in OpenStack Barbican containers. This vulne ...

ROS-20260129-73-0003

CVSS3: 5

redos

10 дней назад

Уязвимость openstack-barbican

GHSA-6rx9-c2rh-3qv4

CVSS3: 6

github

больше 2 лет назад

OpenStack Barbican information disclosure vulnerability

EPSS

Процентиль: 22%

0.00074

Низкий

6 Medium

CVSS3

5 Medium

CVSS3

Дефекты

CWE-653

NVD-CWE-noinfo