CVE-2022-3100: Openstack Barbican

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.

Affected products

• Openstack Barbican: affected versions not specified
• Red Hat Openstack: version 13 only; version 16.1 only; version 16.2 only; version 17 only
• Red Hat Openstack For IBM Power: version 13 only; version 16.1 only; version 16.2 only
• Red Hat Openstack Platform: version 13.0 only

Published 2023-01-18. Last modified 2026-06-17.