CVE-2023-1636CWE-653

Incomplete container isolation

Medium · published September 24, 2023

CVSS v3.1
6.0
EPSS
0%
Percentile
40.7
In the wild
Unconfirmed
What it is

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is compromised, it could gain access to the data transmitted to and from Barbican.

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00484 · 40.7th percentile
Weakness
CWE-653 · Improper Isolation or Compartmentalization
Published
2023-09-24T00:09Z
EPSS history
Timeline
  • 24 SEP 00:09Z
    Incomplete container isolation
    cvelistv5