Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2023-1633

Insecure barbican configuration file leaking credential

Description

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a openstack-barbican

Default version status: affected

Red Hat Red Hat OpenStack Platform 13 (Queens)

Default version status: unknown

Red Hat Red Hat OpenStack Platform 16.1

Default version status: affected

Red Hat Red Hat OpenStack Platform 16.2

Default version status: affected

Red Hat Red Hat OpenStack Platform 17.0

Default version status: affected

RDO OpenStack RDO

Default version status: affected

References