Debian/barbican: medium 5.9
A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.
Action: Upgrade barbican to 1:15.0.0~rc3-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:15.0.0~rc3-1 | - |
Fixed versions
| 1:15.0.0~rc3-1 |
Sources
- osv: DEBIAN-CVE-2022-3100#Debian:14/barbican
- https://security-tracker.debian.org/tracker/CVE-2022-3100
published · modified · JSON