medium6.6
CVE-2023-1633
OpenStack Barbican credential leak flaw
Impact
A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | barbican | <= 16.0.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openstack | Barbican | All versions |
| Redhat | Openstack Platform | Versions 16.1, 16.2, 17.0 |