GitHub Advisoryadvisory · PyPI

GHSA-6qqp-4vm3-359v OpenStack Barbican credential leak flaw

MEDIUM Published 2023-09-24 Modified 2023-09-25 Official page ↗
Aliases
CVE-2023-1633
Ecosystem
PyPI
Packages
barbican
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Weaknesses
CWE-522
Reviewed
2023-09-25

Affected packages

• PyPI barbican: <= 16.0.0 (no fix yet)

Description

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials.

Related

Alias · CVE (1)

  • CVE-2023-1633 A credentials leak flaw was found in OpenStack Barbican. vulnerability

Weakness · CWE (1)

  • CWE-522 Insufficiently Protected Credentials weakness

References