Improper access control in barbican - CVE-2022-3100

Vulnerability identifier: #VU67757

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-3100

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A remote attacker can bypass access policy via a query string when accessing the API.

barbican
Debian Linux
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
HPE Helion Openstack
Ubuntu
openstack-barbican (Red Hat package)
spark
python-barbican
openstack-barbican-worker
openstack-barbican-retry
openstack-barbican
openstack-barbican-api
openstack-barbican-doc
openstack-barbican-keystone-listener
venv-openstack-barbican-x86_64
python-barbican (Ubuntu package)
python3-barbican (Ubuntu package)
barbican (Debian package)
openstack-neutron-macvtap-agent
openstack-neutron
openstack-neutron-dhcp-agent
openstack-neutron-ha-tool
python-neutron
openstack-neutron-l3-agent
openstack-neutron-server
openstack-neutron-openvswitch-agent
openstack-neutron-metering-agent
openstack-neutron-metadata-agent
openstack-neutron-linuxbridge-agent
venv-openstack-neutron-x86_64
python-heat-gbp
openstack-heat-gbp
python-horizon-plugin-gbp-ui
openstack-horizon-plugin-gbp-ui
python-neutron-gbp
openstack-neutron-gbp
venv-openstack-horizon-x86_64
venv-openstack-nova-x86_64
Red Hat OpenStack for IBM Power
Red Hat OpenStack

Install update from vendor's website.

openstack-barbican (Red Hat package) - addressed in versions 6.0.1-6.el7ost, 9.0.1-1.20220112203416.07be198.el8ost, 9.0.2-2.20220122185349.c718783.el8ost, 12.0.1-0.20220614210405.486e607.el9ost
spark - update to 2.2.3-5.12.1
python-barbican - addressed in versions 5.0.2~dev3-3.17.2, 7.0.1~dev24-3.17.1
openstack-barbican-worker - addressed in versions 5.0.2~dev3-3.17.2, 7.0.1~dev24-3.17.1
openstack-barbican-retry - addressed in versions 5.0.2~dev3-3.17.2, 7.0.1~dev24-3.17.1
openstack-barbican - addressed in versions 5.0.2~dev3-3.17.2, 7.0.1~dev24-3.17.1
openstack-barbican-api - addressed in versions 5.0.2~dev3-3.17.2, 7.0.1~dev24-3.17.1
openstack-barbican-doc - update to 5.0.2~dev3-3.17.2
openstack-barbican-keystone-listener - addressed in versions 5.0.2~dev3-3.17.2, 7.0.1~dev24-3.17.1
venv-openstack-barbican-x86_64 - addressed in versions 5.0.2~dev3-12.43.2, 7.0.1~dev24-3.37.1
python-barbican (Ubuntu package) - update to 1:6.0.1-0ubuntu1.2
python3-barbican (Ubuntu package) - addressed in versions 1:10.1.0-0ubuntu2.2, 2:14.0.0-0ubuntu1.1
barbican (Debian package) - update to 1:11.0.0-3+deb11u1
openstack-neutron-macvtap-agent - update to 13.0.8~dev209-3.43.1
openstack-neutron - update to 13.0.8~dev209-3.43.1
openstack-neutron-dhcp-agent - update to 13.0.8~dev209-3.43.1
openstack-neutron-ha-tool - update to 13.0.8~dev209-3.43.1
python-neutron - update to 13.0.8~dev209-3.43.1
openstack-neutron-l3-agent - update to 13.0.8~dev209-3.43.1
openstack-neutron-server - update to 13.0.8~dev209-3.43.1
openstack-neutron-openvswitch-agent - update to 13.0.8~dev209-3.43.1
openstack-neutron-metering-agent - update to 13.0.8~dev209-3.43.1
openstack-neutron-metadata-agent - update to 13.0.8~dev209-3.43.1
openstack-neutron-linuxbridge-agent - update to 13.0.8~dev209-3.43.1
venv-openstack-neutron-x86_64 - update to 13.0.8~dev209-6.43.1
python-heat-gbp - update to 14.0.1~dev5-3.12.1
openstack-heat-gbp - update to 14.0.1~dev5-3.12.1
python-horizon-plugin-gbp-ui - update to 14.0.1~dev6-3.15.1
openstack-horizon-plugin-gbp-ui - update to 14.0.1~dev6-3.15.1
python-neutron-gbp - update to 14.0.1~dev52-3.37.1
openstack-neutron-gbp - update to 14.0.1~dev52-3.37.1
venv-openstack-horizon-x86_64 - update to 14.1.1~dev11-4.43.1
venv-openstack-nova-x86_64 - update to 18.3.1~dev92-3.43.1

• https://access.redhat.com/errata/RHSA-2022:6750
• https://bugzilla.redhat.com/show_bug.cgi?id=2125404

• Security restrictions bypass in Openstack barbican
• Security restrictions bypass in Red Hat OpenStack Platform
• Debian update for barbican
• Ubuntu update for barbican
• SUSE update for openstack-barbican, openstack-heat-gbp, openstack-horizon-plugin-gbp-ui, openstack-neutron, openstack-neutron-gbp
• SUSE update for openstack-barbican