Barbican (Openstack) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 90 known versions, newest CVE from 2023-09-24. Vendor: Openstack.

CVEs of Barbican

• CVE-2023-1633 - CVSS 6.6 (medium), 2023-09-24: A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to…
• CVE-2023-1636 - CVSS 6 (medium), 2023-09-24: A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration.…
• CVE-2022-3100 - CVSS 5.9 (medium), 2023-01-18: A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.
• CVE-2022-23451 - CVSS 8.1 (high), 2022-09-06: An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or…
• CVE-2022-23452 - CVSS 4.9 (medium), 2022-09-01: An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container. This flaw allows an…