Authorization

An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container. This flaw allows an attacker on the network to consume protected resources and cause a denial of service...

Authorization Bypass

openstack-barbican is vulnerable to authorization bypass. The vulnerability exists because anyone with an admin role could add secrets to a different project container which allows an attacker on the network to consume protected resources and cause a denial of service...