Описание
A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenStack Platform 17.1 | openstack-barbican | Not affected | ||
| Red Hat OpenStack Platform 18.0 | openstack-barbican | Not affected | ||
| Red Hat OpenStack Platform 13.0 - ELS | openstack-barbican | Fixed | RHSA-2022:6750 | 29.09.2022 |
| Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUS | openstack-barbican | Fixed | RHSA-2022:6750 | 29.09.2022 |
| Red Hat OpenStack Platform 16.1 | openstack-barbican | Fixed | RHSA-2022:6750 | 29.09.2022 |
| Red Hat OpenStack Platform 16.2 | openstack-barbican | Fixed | RHSA-2022:6750 | 29.09.2022 |
| Red Hat OpenStack Platform 17.0 | openstack-barbican | Fixed | RHSA-2022:6750 | 29.09.2022 |
Показывать по
10
Дополнительная информация
Статус:
Important
Дефект:
CWE-305
https://bugzilla.redhat.com/show_bug.cgi?id=2125404openstack-barbican: access policy bypass via query string injection
7.1 High
CVSS3
Связанные уязвимости
CVSS3: 5.9
ubuntu
почти 4 года назад
A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.
CVSS3: 5.9
nvd
почти 4 года назад
A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.
CVSS3: 5.9
debian
почти 4 года назад
A flaw was found in the openstack-barbican component. This issue allow ...
CVSS3: 5.9
github
почти 4 года назад
A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.
7.1 High
CVSS3