Red Hat Security Advisory

RHSA-2022:8874

Red Hat OpenStack Platform 16.1.9 (openstack-barbican) security update

Released 2022-12-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 16.1 openstack-barbican-9.0.1-1.20220916133702.07be198.el8ost, openstack-barbican-api-9.0.1-1.20220916133702.07be198.el8ost, openstack-barbican-common-9.0.1-1.20220916133702.07be198.el8ost +3

TI-2022-07511 CVE-2022-23451 · GHSA-p2jg-q8hw-p7gc

LOW 38

An authorization flaw was found in openstack-barbican.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0128 Published 2022-09-06 Partial fix · 14.0.0 CWE-863

TI-2022-07512 CVE-2022-23452 · GHSA-6p2h-rjj7-2j63

LOW 25

An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01294 Published 2022-09-01 Partial fix · 14.0.0 CWE-863