A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "barbican-api", "binary_version": "1:6.0.1-0ubuntu1.2" }, { "binary_name": "barbican-common", "binary_version": "1:6.0.1-0ubuntu1.2" }, { "binary_name": "barbican-doc", "binary_version": "1:6.0.1-0ubuntu1.2" }, { "binary_name": "barbican-keystone-listener", "binary_version": "1:6.0.1-0ubuntu1.2" }, { "binary_name": "barbican-worker", "binary_version": "1:6.0.1-0ubuntu1.2" }, { "binary_name": "python-barbican", "binary_version": "1:6.0.1-0ubuntu1.2" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "barbican-api", "binary_version": "1:10.1.0-0ubuntu2.2" }, { "binary_name": "barbican-common", "binary_version": "1:10.1.0-0ubuntu2.2" }, { "binary_name": "barbican-doc", "binary_version": "1:10.1.0-0ubuntu2.2" }, { "binary_name": "barbican-keystone-listener", "binary_version": "1:10.1.0-0ubuntu2.2" }, { "binary_name": "barbican-worker", "binary_version": "1:10.1.0-0ubuntu2.2" }, { "binary_name": "python3-barbican", "binary_version": "1:10.1.0-0ubuntu2.2" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "barbican-api", "binary_version": "2:14.0.0-0ubuntu1.1" }, { "binary_name": "barbican-common", "binary_version": "2:14.0.0-0ubuntu1.1" }, { "binary_name": "barbican-doc", "binary_version": "2:14.0.0-0ubuntu1.1" }, { "binary_name": "barbican-keystone-listener", "binary_version": "2:14.0.0-0ubuntu1.1" }, { "binary_name": "barbican-worker", "binary_version": "2:14.0.0-0ubuntu1.1" }, { "binary_name": "python3-barbican", "binary_version": "2:14.0.0-0ubuntu1.1" } ] }