CVE-2022-3100

CVSS V2 None CVSS V3 None
Description
A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.
Overview
  • CVE ID
  • CVE-2022-3100
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-01-18T17:15:10
  • Last Modified Date
  • 2023-01-26T15:11:24
Weakness Enumerations
CWE URL
CWE-305 http://cwe.mitre.org/data/definitions/305.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:a:openstack:barbican:-:*:*:*:*:*:*:* 1 OR
AND
cpe:2.3:a:redhat:openstack:13:*:*:*:els:*:*:* 1 OR
cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:redhat:openstack:16.2:-:*:*:*:*:*:* 1 OR
cpe:2.3:a:redhat:openstack:17:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:redhat:openstack_for_ibm_power:13:*:*:*:els:*:*:* 1 OR
cpe:2.3:a:redhat:openstack_for_ibm_power:16.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:redhat:openstack_for_ibm_power:16.2:*:*:*:*:*:*:* 1 OR
AND
cpe:2.3:a:redhat:openstack_platform:13.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:* 0 OR
References
Reference URL Reference Tags
https://access.redhat.com/security/cve/CVE-2022-3100
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-3100
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3100
History
Created Old Value New Value Data Type Notes
2023-01-18 18:18:35 Added to TrackCVE
2023-01-18 18:18:36 Weakness Enumeration new
2023-01-18 20:14:15 2023-01-18T19:46:26 CVE Modified Date updated
2023-01-18 20:14:15 Received Awaiting Analysis Vulnerability Status updated
2023-01-25 17:14:37 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-01-26 15:13:40 2023-01-26T15:11:24 CVE Modified Date updated
2023-01-26 15:13:40 Undergoing Analysis Analyzed Vulnerability Status updated
2023-01-26 15:13:41 CPE Information updated