Barbican vulnerability

2022-10-2500:00:00

ubuntu.com

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.2%

JSON

Releases

Ubuntu 22.04 LTS
Ubuntu 20.04 LTS
Ubuntu 18.04 ESM

Packages

barbican - OpenStack Key Management Service - API Server

Details

Douglas Mendizabal discovered that Barbican incorrectly handled certain
query strings. A remote attacker could possibly use this issue to bypass
the access policy.

OSVersionArchitecturePackageVersionFilename
Ubuntu22.04noarchpython3-barbican< 2:14.0.0-0ubuntu1.1UNKNOWN
Ubuntu22.04noarchbarbican-api< 2:14.0.0-0ubuntu1.1UNKNOWN
Ubuntu22.04noarchbarbican-common< 2:14.0.0-0ubuntu1.1UNKNOWN
Ubuntu22.04noarchbarbican-doc< 2:14.0.0-0ubuntu1.1UNKNOWN
Ubuntu22.04noarchbarbican-keystone-listener< 2:14.0.0-0ubuntu1.1UNKNOWN
Ubuntu22.04noarchbarbican-worker< 2:14.0.0-0ubuntu1.1UNKNOWN
Ubuntu20.04noarchpython3-barbican< 1:10.1.0-0ubuntu2.2UNKNOWN
Ubuntu20.04noarchbarbican-api< 1:10.1.0-0ubuntu2.2UNKNOWN
Ubuntu20.04noarchbarbican-common< 1:10.1.0-0ubuntu2.2UNKNOWN
Ubuntu20.04noarchbarbican-doc< 1:10.1.0-0ubuntu2.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	22.04	noarch	python3-barbican	< 2:14.0.0-0ubuntu1.1	UNKNOWN
Ubuntu	22.04	noarch	barbican-api	< 2:14.0.0-0ubuntu1.1	UNKNOWN
Ubuntu	22.04	noarch	barbican-common	< 2:14.0.0-0ubuntu1.1	UNKNOWN
Ubuntu	22.04	noarch	barbican-doc	< 2:14.0.0-0ubuntu1.1	UNKNOWN
Ubuntu	22.04	noarch	barbican-keystone-listener	< 2:14.0.0-0ubuntu1.1	UNKNOWN
Ubuntu	22.04	noarch	barbican-worker	< 2:14.0.0-0ubuntu1.1	UNKNOWN
Ubuntu	20.04	noarch	python3-barbican	< 1:10.1.0-0ubuntu2.2	UNKNOWN
Ubuntu	20.04	noarch	barbican-api	< 1:10.1.0-0ubuntu2.2	UNKNOWN
Ubuntu	20.04	noarch	barbican-common	< 1:10.1.0-0ubuntu2.2	UNKNOWN
Ubuntu	20.04	noarch	barbican-doc	< 1:10.1.0-0ubuntu2.2	UNKNOWN