CVE-2022-3100 Auth bypass in Red Hat OpenStack Platform

Medium 5.9 Published 18 Jan 2023 Updated 3 Apr 2025

Attackers can bypass access policies in OpenStack Barbican via query strings, potentially accessing restricted API resources.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2022-3100?

CVE-2022-3100 is a medium-severity authentication bypass vulnerability in Redhat Openstack, published on 18 Jan 2023. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.

Weakness: CWE-305

Which versions are affected by CVE-2022-3100?

It affects 4 products.

Linux distribution packages (23)

`openstack-barbican` Red Hat:openstack:13::el7	All versions	`0:6.0.1-6.el7ost`
`openstack-barbican-api` Red Hat:openstack:13::el7	All versions	`0:6.0.1-6.el7ost`
`openstack-barbican-common` Red Hat:openstack:13::el7	All versions	`0:6.0.1-6.el7ost`
`openstack-barbican` Red Hat:openstack:16.1::el8	All versions	`0:9.0.1-1.20220112203416.07be198.el8ost`
`openstack-barbican-api` Red Hat:openstack:16.1::el8	All versions	`0:9.0.1-1.20220112203416.07be198.el8ost`
`openstack-barbican-common` Red Hat:openstack:16.1::el8	All versions	`0:9.0.1-1.20220112203416.07be198.el8ost`
`python3-barbican` Red Hat:openstack:16.1::el8	All versions	`0:9.0.1-1.20220112203416.07be198.el8ost`
`openstack-barbican` Red Hat:openstack:16.2::el8	All versions	`0:9.0.2-2.20220122185349.c718783.el8ost`
`openstack-barbican-api` Red Hat:openstack:16.2::el8	All versions	`0:9.0.2-2.20220122185349.c718783.el8ost`
`openstack-barbican-common` Red Hat:openstack:16.2::el8	All versions	`0:9.0.2-2.20220122185349.c718783.el8ost`
`python3-barbican` Red Hat:openstack:16.2::el8	All versions	`0:9.0.2-2.20220122185349.c718783.el8ost`
`openstack-barbican` Red Hat:openstack:17.0::el9	All versions	`0:12.0.1-0.20220614210405.486e607.el9ost`
`openstack-barbican-api` Red Hat:openstack:17.0::el9	All versions	`0:12.0.1-0.20220614210405.486e607.el9ost`
`openstack-barbican-common` Red Hat:openstack:17.0::el9	All versions	`0:12.0.1-0.20220614210405.486e607.el9ost`
`python3-barbican` Red Hat:openstack:17.0::el9	All versions	`0:12.0.1-0.20220614210405.486e607.el9ost`
`openstack-barbican` SUSE:HPE Helion OpenStack 8	All versions	`5.0.2~dev3-3.17.2`
`openstack-barbican-doc` SUSE:HPE Helion OpenStack 8	All versions	`5.0.2~dev3-3.17.2`
`venv-openstack-barbican` SUSE:HPE Helion OpenStack 8	All versions	`5.0.2~dev3-12.43.2`
`openstack-barbican` SUSE:OpenStack Cloud 8	All versions	`5.0.2~dev3-3.17.2`
`openstack-barbican-doc` SUSE:OpenStack Cloud 8	All versions	`5.0.2~dev3-3.17.2`
`venv-openstack-barbican` SUSE:OpenStack Cloud 8	All versions	`5.0.2~dev3-12.43.2`
`openstack-barbican` SUSE:OpenStack Cloud Crowbar 8	All versions	`5.0.2~dev3-3.17.2`
`openstack-barbican-doc` SUSE:OpenStack Cloud Crowbar 8	All versions	`5.0.2~dev3-3.17.2`

Products include Openstack Barbican, Redhat Openstack, Redhat Openstack for Ibm Power, Redhat Openstack Platform.

How do I fix CVE-2022-3100?

Apply the vendor's patch.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2022-3100 being exploited?

There is no known exploitation of CVE-2022-3100 in the wild and no public exploit code.

All Redhat Openstack vulnerabilities

Sources

Also known as DEBIAN-CVE-2022-3100, DLA-3136-1, DSA-5247-1, GHSA-5hg3-ffv7-g5ff, RHSA-2022:6750, SUSE-SU-2023:0071-1 and 2 more.