CVE-2022-3100
published 2023-01-18CVE-2022-3100: A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.
medium5.9CVSS 3.1
AVNACHPRLUINSUCHILAN
A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | barbican | < barbican 1:15.0.0~rc3-1 (bookworm) | barbican 1:15.0.0~rc3-1 (bookworm) |
| openstack | barbican | >= 0 < 1:11.0.0-3+deb11u1 | 1:11.0.0-3+deb11u1 |
| openstack | barbican | >= 0 < 1:15.0.0~rc3-1 | 1:15.0.0~rc3-1 |
| openstack | barbican | >= 0 < 1:15.0.0~rc3-1 | 1:15.0.0~rc3-1 |
| openstack | barbican | >= 0 < 1:15.0.0~rc3-1 | 1:15.0.0~rc3-1 |
| redhat | openstack | — | — |
| redhat | openstack | — | — |
| redhat | openstack | — | — |
| redhat | openstack | — | — |
| redhat | openstack_for_ibm_power | — | — |
| redhat | openstack_for_ibm_power | — | — |
| redhat | openstack_for_ibm_power | — | — |
| redhat | openstack_platform | — | — |
CVSS provenance
nvdv3.15.9MEDIUMCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
osv5.9MEDIUM