Summary
Douglas Mendizabal discovered that Barbican incorrectly handled certain
query strings. A remote attacker could possibly use this issue to bypass
the access policy.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | barbican | 1:6.0.1-0ubuntu1.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | barbican | 1:10.1.0-0ubuntu2.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | barbican | 2:14.0.0-0ubuntu1.1 |
Vulnerabilities 1
-
Medium 5.9
A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when…
References
-
report
https://ubuntu.com/security/CVE-2022-3100