Lucene search
K

CVE-2022-23451

🗓️ 06 Sep 2022 17:18:52Reported by redhatType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 703 Views

An authorization flaw found in openstack-barbican with default policy rules for secret metadata API allowing any authenticated user to add, modify, or delete metadata from any secret regardless of ownership, leading to denial of service

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2022-23451
6 Sep 202218:15
attackerkb
CNNVD
barbican 授权问题漏洞
25 Apr 202200:00
cnnvd
Cvelist
CVE-2022-23451
6 Sep 202217:18
cvelist
Debian CVE
CVE-2022-23451
6 Sep 202217:18
debiancve
EUVD
EUVD-2022-6888
3 Oct 202520:07
euvd
Github Security Blog
Barbican authorization flaw before v14.0.0
7 Sep 202200:01
github
NVD
CVE-2022-23451
6 Sep 202218:15
nvd
OpenVAS
Ubuntu: Security Advisory (USN-5387-1)
26 Apr 202200:00
openvas
OSV
CVE-2022-23451
6 Sep 202218:15
osv
OSV
DEBIAN-CVE-2022-23451
6 Sep 202218:15
osv
Rows per page
NVD
Vulners
[
  {
    "product": "openstack/barbican",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in v14.0.0"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 06:48Current
7.5High risk
Vulners AI Score7.5
CVSS 3.18.1
EPSS0.00339
703