← Database

CVE-2022-23452

MEDIUM CVSS: 4.9 Published: 2022-09-01 Modified: 2026-06-17

Description

An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container. This flaw allows an attacker on the network to consume protected resources and cause a denial of service.

Affected Platforms

Redhat Openstack PlatformOpenstack Barbican

Weakness Type

CWE-863, CWE-863

References