151 matches found
OpenStack Barbican credential leak flaw
A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials...
PYSEC-2026-1213 OpenStack Barbican credential leak flaw
A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials...
OpenStack Barbican information disclosure vulnerability
A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is...
PYSEC-2026-1214 OpenStack Barbican information disclosure vulnerability
A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is...
PYSEC-2026-786 Barbican authorization flaw before v14.0.0
An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete protected data,...
Barbican authorization flaw before v14.0.0
An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete protected data,...
openstack-barbican Denial of Service vulnerability
An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container. This flaw allows an attacker on the network to consume protected resources and cause a denial of service...
PYSEC-2026-785 openstack-barbican Denial of Service vulnerability
An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container. This flaw allows an attacker on the network to consume protected resources and cause a denial of service...
OpenStack Barbican Unauthorized Access
The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform is related to insufficient spatial partitioning. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
OpenStack Barbican Unauthorized Access
The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform is related to errors in information processing. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...
openstack-barbican Privilege Escalation
The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform relates to the bypassing of authentication processes. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...
ROS-20260129-73-0001
Vulnerability in openstack-barbican related to authentication bypass due to an initial bug. Exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges...
ROS-20260129-73-0002
Vulnerability in openstack-barbican related to lack of protection of proprietary data. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...
ROS-20260129-73-0003
Vulnerability in openstack-barbican related to insufficient spatial partitioning. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
EUVD-2022-6721
Malicious code in bioql PyPI...
EUVD-2022-6888
Malicious code in bioql PyPI...
EUVD-2023-2449
Malicious code in bioql PyPI...
EUVD-2023-2450
Malicious code in bioql PyPI...
EUVD-2022-42529
Malicious code in bioql PyPI...
PT-2025-55004
Уязвимость компонента openstack-barbican платформы облачных сервисов Red Hat OpenStack Platform связана с обходом аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...