PT-2023-17138 · Openstack+1 · Openstack-Barbican+1

Nick Tait · Publicado 2023-09-23 · Atualizado 2026-01-29 · CVE-2023-1636

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Média

Vetor base

AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions OpenStack Barbican (affected versions not specified)

Description A vulnerability was found in OpenStack Barbican containers, applicable only to deployments utilizing an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is compromised, it could gain access to the data transmitted to and from Barbican.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-653

Identificadores relacionados

BDU:2026-03563

CVE-2023-1636

GHSA-6RX9-C2RH-3QV4

Produtos afetados

Openstack-Barbican

Red Os

Referências · 13

• https://github.com/openstack/barbican · Nota
• https://t.me/cibsecurity/70968 · Publicação no Telegram
• https://access.redhat.com/security/cve/cve-2023-1636 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-1636 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=2181765 · Nota
• https://t.me/cvenotify/58610 · Publicação no Telegram
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-openstack-barbican-cve-2023-1636-7.3 · Nota
• https://osv.dev/vulnerability/CVE-2023-1636 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-6rx9-c2rh-3qv4 · Aviso do Fabricante
• https://t.me/cvenotify/58522 · Publicação no Telegram
• https://access.redhat.com/security/cve/CVE-2023-1636 · Nota
• https://bdu.fstec.ru/vul/2026-03563 · Nota de Segurança
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Aviso do Fabricante