CVE-2023-1636: Incomplete container isolation

Severity: medium (CVSS 5.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-09-24 · updated 2026-06-17
Weakness: CWE-653

Description

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is compromised, it could gain access to the data transmitted to and from Barbican.

Affected products

OpenStack Barbican: all versions
nova_libvirt container provided by the Red Hat OpenStack Platform: 16.1, 16.2, 17.0

References

https://access.redhat.com/security/cve/CVE-2023-1636
https://bugzilla.redhat.com/show_bug.cgi?id=2181765
https://access.redhat.com/security/cve/CVE-2023-1636
https://bugzilla.redhat.com/show_bug.cgi?id=2181765

Get alerted when CVE-2023-1636 or the next vulnerability affects your stack