A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials.
Credits
This issue was discovered by Ade Lee (Red Hat) and Grzegorz Grasza (Red Hat).