CVE-2023-1633

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials.

Score

CVSS 3.1 6.6 Medium

Status

Modified - secalert@redhat.com

Published

2023-09-24

Last modified

2024-09-24

Weaknesses

CWE-200, CWE-522

Affected products

• Barbican (Openstack)
• Openstack Rdo (Rdo)
• Openstack (Redhat)
• Openstack Platform (Redhat)

References

• https://access.redhat.com/security/cve/CVE-2023-1633
• https://bugzilla.redhat.com/show_bug.cgi?id=2181761