Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-3100

Опубликовано: 18 янв. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.9

Описание

A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.

РелизСтатусПримечание
bionic

released

1:6.0.1-0ubuntu1.2
devel

not-affected

2:15.0.0-0ubuntu1
esm-apps-legacy/xenial

needed

esm-apps/xenial

ignored

end of ESM support, was needed
esm-infra/bionic

released

1:6.0.1-0ubuntu1.2
esm-infra/focal

released

1:10.1.0-0ubuntu2.2
focal

released

1:10.1.0-0ubuntu2.2
jammy

released

2:14.0.0-0ubuntu1.1
kinetic

not-affected

2:15.0.0-0ubuntu1
lunar

not-affected

2:15.0.0-0ubuntu1

Показывать по

EPSS

Процентиль: 36%
0.00433
Низкий

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.1
redhat
почти 4 года назад

A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.

CVSS3: 5.9
nvd
больше 3 лет назад

A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.

CVSS3: 5.9
debian
больше 3 лет назад

A flaw was found in the openstack-barbican component. This issue allow ...

CVSS3: 5.9
github
больше 3 лет назад

A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.

CVSS3: 5.9
fstec
10 месяцев назад

Уязвимость компонента openstack-barbican платформы облачных сервисов Red Hat OpenStack Platform, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 36%
0.00433
Низкий

5.9 Medium

CVSS3