CVE-2023-1633

Fixed in a distro release EPSS <1%CVSS 6.6

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials.

Published 2023-09-24 · CVE record · OSV

Products: Red Hat OpenStack Platform 13 (Queens), Red Hat OpenStack Platform 16.1, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.0, OpenStack RDO

Fixed upstream

Ecosystem	Package	Fixed in
PyPI	barbican	no fix

Distro releases

Release	Package	Fixed in
Red Hat openstack 16.2	openstack-barbican	0:9.0.2-2.20230515185056.1cd585c.el8ost