Lucene search
K

7744 matches found

NVD
NVD
added 2023/09/24 1:15 a.m.15 views

CVE-2023-1633

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials...

6.6CVSS6AI score0.00024EPSS
Exploits0References2
NVD
NVD
added 2023/09/24 1:15 a.m.13 views

CVE-2023-1636

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is...

6CVSS6AI score0.00074EPSS
Exploits0References2
OSV
OSV
added 2023/09/24 1:15 a.m.17 views

CVE-2023-1633

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials...

5.5CVSS6.4AI score0.00024EPSS
Exploits0References2
OSV
OSV
added 2023/09/24 1:15 a.m.17 views

CVE-2023-1636

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is...

5CVSS7.2AI score0.00074EPSS
Exploits0References2
NVD
NVD
added 2023/09/24 1:15 a.m.12 views

CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

7.4CVSS7.2AI score0.00111EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2023/09/24 1:15 a.m.2 views

CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

7.4CVSS5.9AI score0.00111EPSS
Exploits1References5
OSV
OSV
added 2023/09/24 1:15 a.m.1 views

DEBIAN-CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

5CVSS6.1AI score0.00111EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2023/09/24 1:15 a.m.25 views

CVE-2023-1636

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is...

6CVSS6AI score0.00074EPSS
Exploits0References1
Prion
Prion
added 2023/09/24 1:15 a.m.19 views

Stack overflow

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

4CVSS4.7AI score0.00111EPSS
Exploits1References4Affected Software1
Prion
Prion
added 2023/09/24 1:15 a.m.25 views

Design/Logic Flaw

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is...

4CVSS5.1AI score0.00074EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2023/09/24 1:15 a.m.18 views

Design/Logic Flaw

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials...

1.7CVSS5AI score0.00024EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2023/09/24 1:15 a.m.17 views

CVE-2023-1633

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials...

6.6CVSS6.4AI score0.00024EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2023/09/24 12:9 a.m.16 views

CVE-2023-1633

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials...

6.6CVSS5.8AI score0.00024EPSS
Exploits0
CVE
CVE
added 2023/09/24 12:9 a.m.77 views

CVE-2023-1633

CVE-2023-1633 affects OpenStack Barbican. Multiple sources describe a credentials-leak flaw where a local authenticated attacker can read the Barbican configuration file and access sensitive credentials. The issue is tied to insecure configuration file handling and is acknowledged in Red Hat’s RH...

6.6CVSS5.4AI score0.00024EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/09/24 12:9 a.m.18 views

CVE-2023-1633 Insecure barbican configuration file leaking credential

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials...

6.6CVSS6.2AI score0.00024EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/09/24 12:9 a.m.15 views

CVE-2023-1633 Insecure barbican configuration file leaking credential

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials...

6.6CVSS6AI score0.00024EPSS
Exploits0References2
CVE
CVE
added 2023/09/24 12:9 a.m.74 views

CVE-2023-1636

OpenStack Barbican containers in an all‑in‑one configuration share CGROUP, USER, and NET namespaces with the host and other services, allowing a compromised service to access data transmitted to/from Barbican. The CVE-2023-1636 entry describes an information‑disclosure risk due to incomplete cont...

6CVSS5.4AI score0.00074EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/09/24 12:9 a.m.9 views

CVE-2023-1636 Incomplete container isolation

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is...

6CVSS6.2AI score0.00074EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2023/09/24 12:9 a.m.26 views

CVE-2023-1636

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is...

6CVSS5.5AI score0.00074EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2023/09/24 12:9 a.m.13 views

CVE-2023-1636 Incomplete container isolation

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is...

6CVSS7.2AI score0.00074EPSS
Exploits0References2
Rows per page
Query Builder