https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:29:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-13808 EUVD-2026-13808 https://cve.radiocsirt.org/vuln/euvd-2026-13808 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23451 <p>An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete protected data, causing a denial of service by consuming protected resources.</p> <p>An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete protected data, causing a denial of service by consuming protected resources.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-23451 https://cve.radiocsirt.org/vuln/ghsa-p2jg-q8hw-p7gc <p><strong>Affected:</strong> PyPI: barbican</p> <p>An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete protected data, causing a denial of service by consuming protected resources.</p> <p><strong>Affected:</strong> PyPI: barbican</p> <p>An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete protected data, causing a denial of service by consuming protected resources.</p> https://cve.radiocsirt.org/vuln/ghsa-p2jg-q8hw-p7gc https://cve.radiocsirt.org/vuln/gsd-2022-23451 gsd-2022-23451 https://cve.radiocsirt.org/vuln/gsd-2022-23451 https://cve.radiocsirt.org/vuln/pysec-2026-786 <p><strong>Affected:</strong> PyPI: barbican</p> <p>An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete protected data, causing a denial of service by consuming protected resources.</p> <p><strong>Affected:</strong> PyPI: barbican</p> <p>An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete protected data, causing a denial of service by consuming protected resources.</p> https://cve.radiocsirt.org/vuln/pysec-2026-786 https://cve.radiocsirt.org/vuln/rhsa-2022:5114 <p>openstack-barbican: Barbican allows authenticated users to add/modify/delete arbitrary metadata on any secret openstack-barbican: Barbican allows anyone with an admin role to add their secrets to a different project&#39;s containers</p> <p>openstack-barbican: Barbican allows authenticated users to add/modify/delete arbitrary metadata on any secret openstack-barbican: Barbican allows anyone with an admin role to add their secrets to a different project&#39;s containers</p> https://cve.radiocsirt.org/vuln/rhsa-2022:5114 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-23451 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: barbican, Ubuntu:18.04:LTS: barbican, Ubuntu:20.04:LTS: barbican</p> <p>An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete protected data, causing a denial of service by consuming protected resources.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: barbican, Ubuntu:18.04:LTS: barbican, Ubuntu:20.04:LTS: barbican</p> <p>An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete protected data, causing a denial of service by consuming protected resources.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-23451 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0439 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0439