RHSA-2022:6750HighCVSS 7.1

Red Hat Security Advisory: Red Hat OpenStack Platform (openstack-barbican) security update

Published
September 29, 2022
Last Modified
October 8, 2026

🔗 CVE IDs covered (1)

CVE-2022-3100 →

📋 Description

CVE-2022-3100 — openstack-barbican: access policy bypass via query string injection

🎯 Affected products40

  • Red Hat OpenStack Platform 13.0 - ELS
  • Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
  • Red Hat OpenStack Platform 16.1
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.0
  • openstack-barbican-0:12.0.1-0.20220614210405.486e607.el9ost.noarch as a component of Red Hat OpenStack Platform 17.0
  • openstack-barbican-0:12.0.1-0.20220614210405.486e607.el9ost.src as a component of Red Hat OpenStack Platform 17.0
  • openstack-barbican-0:6.0.1-6.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 - ELS
  • openstack-barbican-0:6.0.1-6.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
  • openstack-barbican-0:6.0.1-6.el7ost.src as a component of Red Hat OpenStack Platform 13.0 - ELS
  • openstack-barbican-0:6.0.1-6.el7ost.src as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
  • openstack-barbican-0:9.0.1-1.20220112203416.07be198.el8ost.noarch as a component of Red Hat OpenStack Platform 16.1
  • openstack-barbican-0:9.0.1-1.20220112203416.07be198.el8ost.src as a component of Red Hat OpenStack Platform 16.1
  • openstack-barbican-0:9.0.2-2.20220122185349.c718783.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2
  • openstack-barbican-0:9.0.2-2.20220122185349.c718783.el8ost.src as a component of Red Hat OpenStack Platform 16.2
  • openstack-barbican-api-0:12.0.1-0.20220614210405.486e607.el9ost.noarch as a component of Red Hat OpenStack Platform 17.0
  • openstack-barbican-api-0:6.0.1-6.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 - ELS
  • openstack-barbican-api-0:6.0.1-6.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
  • openstack-barbican-api-0:9.0.1-1.20220112203416.07be198.el8ost.noarch as a component of Red Hat OpenStack Platform 16.1
  • openstack-barbican-api-0:9.0.2-2.20220122185349.c718783.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2
  • openstack-barbican-common-0:12.0.1-0.20220614210405.486e607.el9ost.noarch as a component of Red Hat OpenStack Platform 17.0
  • openstack-barbican-common-0:6.0.1-6.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 - ELS
  • openstack-barbican-common-0:6.0.1-6.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
  • openstack-barbican-common-0:9.0.1-1.20220112203416.07be198.el8ost.noarch as a component of Red Hat OpenStack Platform 16.1
  • openstack-barbican-common-0:9.0.2-2.20220122185349.c718783.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2
  • openstack-barbican-keystone-listener-0:12.0.1-0.20220614210405.486e607.el9ost.noarch as a component of Red Hat OpenStack Platform 17.0
  • openstack-barbican-keystone-listener-0:6.0.1-6.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 - ELS
  • openstack-barbican-keystone-listener-0:6.0.1-6.el7ost.noarch as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
  • openstack-barbican-keystone-listener-0:9.0.1-1.20220112203416.07be198.el8ost.noarch as a component of Red Hat OpenStack Platform 16.1
  • openstack-barbican-keystone-listener-0:9.0.2-2.20220122185349.c718783.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2
  • +10 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (4)