CVE-2022-3100 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-3100 Interim 1 9 2025-02-16T03:23:11Z current 2022-09-29T23:39:31Z 2025-02-16T03:23:11Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-3100 A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2023-January/013456.html E-Mail link for SUSE-SU-2023:0070-1 https://lists.suse.com/pipermail/sle-security-updates/2023-January/013455.html E-Mail link for SUSE-SU-2023:0071-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openstack-barbican-5.0.2~dev3-3.17.2 openstack-barbican-7.0.1~dev24-3.17.1 openstack-barbican-api-5.0.2~dev3-3.17.2 openstack-barbican-api-7.0.1~dev24-3.17.1 openstack-barbican-doc-5.0.2~dev3-3.17.2 openstack-barbican-keystone-listener-5.0.2~dev3-3.17.2 openstack-barbican-keystone-listener-7.0.1~dev24-3.17.1 openstack-barbican-retry-5.0.2~dev3-3.17.2 openstack-barbican-retry-7.0.1~dev24-3.17.1 openstack-barbican-worker-5.0.2~dev3-3.17.2 openstack-barbican-worker-7.0.1~dev24-3.17.1 openstack-heat-gbp-14.0.1~dev5-3.12.1 openstack-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 openstack-neutron-13.0.8~dev209-3.43.1 openstack-neutron-dhcp-agent-13.0.8~dev209-3.43.1 openstack-neutron-gbp-14.0.1~dev52-3.37.1 openstack-neutron-ha-tool-13.0.8~dev209-3.43.1 openstack-neutron-l3-agent-13.0.8~dev209-3.43.1 openstack-neutron-linuxbridge-agent-13.0.8~dev209-3.43.1 openstack-neutron-macvtap-agent-13.0.8~dev209-3.43.1 openstack-neutron-metadata-agent-13.0.8~dev209-3.43.1 openstack-neutron-metering-agent-13.0.8~dev209-3.43.1 openstack-neutron-openvswitch-agent-13.0.8~dev209-3.43.1 openstack-neutron-server-13.0.8~dev209-3.43.1 python-barbican-5.0.2~dev3-3.17.2 python-barbican-7.0.1~dev24-3.17.1 python-heat-gbp-14.0.1~dev5-3.12.1 python-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 python-neutron-13.0.8~dev209-3.43.1 python-neutron-gbp-14.0.1~dev52-3.37.1 spark-2.2.3-5.12.1 venv-openstack-barbican-x86_64-5.0.2~dev3-12.43.2 venv-openstack-barbican-x86_64-7.0.1~dev24-3.37.1 venv-openstack-horizon-x86_64-14.1.1~dev11-4.43.1 venv-openstack-neutron-x86_64-13.0.8~dev209-6.43.1 venv-openstack-nova-x86_64-18.3.1~dev92-3.43.1 openstack-barbican-5.0.2~dev3-3.17.2 as a component of HPE Helion OpenStack 8 openstack-barbican-api-5.0.2~dev3-3.17.2 as a component of HPE Helion OpenStack 8 openstack-barbican-doc-5.0.2~dev3-3.17.2 as a component of HPE Helion OpenStack 8 openstack-barbican-keystone-listener-5.0.2~dev3-3.17.2 as a component of HPE Helion OpenStack 8 openstack-barbican-retry-5.0.2~dev3-3.17.2 as a component of HPE Helion OpenStack 8 openstack-barbican-worker-5.0.2~dev3-3.17.2 as a component of HPE Helion OpenStack 8 python-barbican-5.0.2~dev3-3.17.2 as a component of HPE Helion OpenStack 8 venv-openstack-barbican-x86_64-5.0.2~dev3-12.43.2 as a component of HPE Helion OpenStack 8 openstack-barbican-5.0.2~dev3-3.17.2 as a component of SUSE OpenStack Cloud 8 openstack-barbican-api-5.0.2~dev3-3.17.2 as a component of SUSE OpenStack Cloud 8 openstack-barbican-doc-5.0.2~dev3-3.17.2 as a component of SUSE OpenStack Cloud 8 openstack-barbican-keystone-listener-5.0.2~dev3-3.17.2 as a component of SUSE OpenStack Cloud 8 openstack-barbican-retry-5.0.2~dev3-3.17.2 as a component of SUSE OpenStack Cloud 8 openstack-barbican-worker-5.0.2~dev3-3.17.2 as a component of SUSE OpenStack Cloud 8 python-barbican-5.0.2~dev3-3.17.2 as a component of SUSE OpenStack Cloud 8 venv-openstack-barbican-x86_64-5.0.2~dev3-12.43.2 as a component of SUSE OpenStack Cloud 8 openstack-barbican-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud 9 openstack-barbican-api-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud 9 openstack-barbican-keystone-listener-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud 9 openstack-barbican-retry-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud 9 openstack-barbican-worker-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud 9 openstack-heat-gbp-14.0.1~dev5-3.12.1 as a component of SUSE OpenStack Cloud 9 openstack-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-dhcp-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-gbp-14.0.1~dev52-3.37.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-ha-tool-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-l3-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-linuxbridge-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-macvtap-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-metadata-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-metering-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-openvswitch-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-server-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 python-barbican-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud 9 python-heat-gbp-14.0.1~dev5-3.12.1 as a component of SUSE OpenStack Cloud 9 python-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 as a component of SUSE OpenStack Cloud 9 python-neutron-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 python-neutron-gbp-14.0.1~dev52-3.37.1 as a component of SUSE OpenStack Cloud 9 spark-2.2.3-5.12.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-barbican-x86_64-7.0.1~dev24-3.37.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-horizon-x86_64-14.1.1~dev11-4.43.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-neutron-x86_64-13.0.8~dev209-6.43.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-nova-x86_64-18.3.1~dev92-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-barbican-5.0.2~dev3-3.17.2 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-barbican-api-5.0.2~dev3-3.17.2 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-barbican-doc-5.0.2~dev3-3.17.2 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-barbican-keystone-listener-5.0.2~dev3-3.17.2 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-barbican-retry-5.0.2~dev3-3.17.2 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-barbican-worker-5.0.2~dev3-3.17.2 as a component of SUSE OpenStack Cloud Crowbar 8 python-barbican-5.0.2~dev3-3.17.2 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-barbican-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-barbican-api-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-barbican-keystone-listener-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-barbican-retry-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-barbican-worker-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-heat-gbp-14.0.1~dev5-3.12.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-dhcp-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-gbp-14.0.1~dev52-3.37.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-ha-tool-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-l3-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-linuxbridge-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-macvtap-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-metadata-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-metering-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-openvswitch-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-server-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-barbican-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-heat-gbp-14.0.1~dev5-3.12.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-neutron-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-neutron-gbp-14.0.1~dev52-3.37.1 as a component of SUSE OpenStack Cloud Crowbar 9 spark-2.2.3-5.12.1 as a component of SUSE OpenStack Cloud Crowbar 9 A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API. CVE-2022-3100 HPE Helion OpenStack 8:openstack-barbican-5.0.2~dev3-3.17.2 HPE Helion OpenStack 8:openstack-barbican-api-5.0.2~dev3-3.17.2 HPE Helion OpenStack 8:openstack-barbican-doc-5.0.2~dev3-3.17.2 HPE Helion OpenStack 8:openstack-barbican-keystone-listener-5.0.2~dev3-3.17.2 HPE Helion OpenStack 8:openstack-barbican-retry-5.0.2~dev3-3.17.2 HPE Helion OpenStack 8:openstack-barbican-worker-5.0.2~dev3-3.17.2 HPE Helion OpenStack 8:python-barbican-5.0.2~dev3-3.17.2 HPE Helion OpenStack 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.43.2 SUSE OpenStack Cloud 8:openstack-barbican-5.0.2~dev3-3.17.2 SUSE OpenStack Cloud 8:openstack-barbican-api-5.0.2~dev3-3.17.2 SUSE OpenStack Cloud 8:openstack-barbican-doc-5.0.2~dev3-3.17.2 SUSE OpenStack Cloud 8:openstack-barbican-keystone-listener-5.0.2~dev3-3.17.2 SUSE OpenStack Cloud 8:openstack-barbican-retry-5.0.2~dev3-3.17.2 SUSE OpenStack Cloud 8:openstack-barbican-worker-5.0.2~dev3-3.17.2 SUSE OpenStack Cloud 8:python-barbican-5.0.2~dev3-3.17.2 SUSE OpenStack Cloud 8:venv-openstack-barbican-x86_64-5.0.2~dev3-12.43.2 SUSE OpenStack Cloud 9:openstack-barbican-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:openstack-barbican-api-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:openstack-barbican-keystone-listener-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:openstack-barbican-retry-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:openstack-barbican-worker-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:openstack-heat-gbp-14.0.1~dev5-3.12.1 SUSE OpenStack Cloud 9:openstack-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 SUSE OpenStack Cloud 9:openstack-neutron-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-dhcp-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-gbp-14.0.1~dev52-3.37.1 SUSE OpenStack Cloud 9:openstack-neutron-ha-tool-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-l3-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-linuxbridge-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-macvtap-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-metadata-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-metering-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-openvswitch-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-server-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:python-barbican-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:python-heat-gbp-14.0.1~dev5-3.12.1 SUSE OpenStack Cloud 9:python-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 SUSE OpenStack Cloud 9:python-neutron-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:python-neutron-gbp-14.0.1~dev52-3.37.1 SUSE OpenStack Cloud 9:spark-2.2.3-5.12.1 SUSE OpenStack Cloud 9:venv-openstack-barbican-x86_64-7.0.1~dev24-3.37.1 SUSE OpenStack Cloud 9:venv-openstack-horizon-x86_64-14.1.1~dev11-4.43.1 SUSE OpenStack Cloud 9:venv-openstack-neutron-x86_64-13.0.8~dev209-6.43.1 SUSE OpenStack Cloud 9:venv-openstack-nova-x86_64-18.3.1~dev92-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-barbican-5.0.2~dev3-3.17.2 SUSE OpenStack Cloud Crowbar 8:openstack-barbican-api-5.0.2~dev3-3.17.2 SUSE OpenStack Cloud Crowbar 8:openstack-barbican-doc-5.0.2~dev3-3.17.2 SUSE OpenStack Cloud Crowbar 8:openstack-barbican-keystone-listener-5.0.2~dev3-3.17.2 SUSE OpenStack Cloud Crowbar 8:openstack-barbican-retry-5.0.2~dev3-3.17.2 SUSE OpenStack Cloud Crowbar 8:openstack-barbican-worker-5.0.2~dev3-3.17.2 SUSE OpenStack Cloud Crowbar 8:python-barbican-5.0.2~dev3-3.17.2 SUSE OpenStack Cloud Crowbar 9:openstack-barbican-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:openstack-barbican-api-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:openstack-barbican-keystone-listener-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:openstack-barbican-retry-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:openstack-barbican-worker-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:openstack-heat-gbp-14.0.1~dev5-3.12.1 SUSE OpenStack Cloud Crowbar 9:openstack-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-dhcp-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-gbp-14.0.1~dev52-3.37.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-ha-tool-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-l3-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-linuxbridge-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-macvtap-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-metadata-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-metering-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-openvswitch-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-server-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:python-barbican-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:python-heat-gbp-14.0.1~dev5-3.12.1 SUSE OpenStack Cloud Crowbar 9:python-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 SUSE OpenStack Cloud Crowbar 9:python-neutron-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:python-neutron-gbp-14.0.1~dev52-3.37.1 SUSE OpenStack Cloud Crowbar 9:spark-2.2.3-5.12.1 important 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N