PT-2023-17138 · Openstack+1 · Openstack-Barbican+1

Nick Tait · Published 2023-09-23 · Updated 2026-01-29 · CVE-2023-1636

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions OpenStack Barbican (affected versions not specified)

Description A vulnerability was found in OpenStack Barbican containers, applicable only to deployments utilizing an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is compromised, it could gain access to the data transmitted to and from Barbican.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-653

Related Identifiers

BDU:2026-03563

CVE-2023-1636

GHSA-6RX9-C2RH-3QV4

Affected Products

Openstack-Barbican

Red Os

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2023-1636 · Security Note
• https://osv.dev/vulnerability/CVE-2023-1636 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6rx9-c2rh-3qv4 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03563 · Security Note
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Vendor Advisory
• https://github.com/openstack/barbican · Note
• https://t.me/cibsecurity/70968 · Telegram Post
• https://access.redhat.com/security/cve/cve-2023-1636 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2181765 · Note
• https://t.me/cvenotify/58610 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-openstack-barbican-cve-2023-1636-7.3 · Note
• https://t.me/cvenotify/58522 · Telegram Post
• https://access.redhat.com/security/cve/CVE-2023-1636 · Note