CVE-2022-23452

An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container. This flaw allows an attacker on the network to consume protected resources and cause a denial of service.

• CWE-863
• CWE-863

• https://access.redhat.com/security/cve/CVE-2022-23452Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2022908Issue Tracking, Permissions Required, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2025090Issue Tracking, Third Party Advisory
• https://review.opendev.org/c/openstack/barbican/+/814200Patch, Third Party Advisory
• https://storyboard.openstack.org/#%21/story/2009297
• https://access.redhat.com/security/cve/CVE-2022-23452Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2022908Issue Tracking, Permissions Required, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2025090Issue Tracking, Third Party Advisory
• https://review.opendev.org/c/openstack/barbican/+/814200Patch, Third Party Advisory
• https://storyboard.openstack.org/#%21/story/2009297

Published

Sep 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23447An improper limitation of a pathname to a restricted directo…7.5
• CVE-2022-23448A vulnerability has been identified in SIMATIC Energy Manage…7.8
• CVE-2022-23449A vulnerability has been identified in SIMATIC Energy Manage…7.3
• CVE-2022-2345Use After Free in GitHub repository vim/vim prior to 9.0.004…7.8
• CVE-2022-23450A vulnerability has been identified in SIMATIC Energy Manage…9.8
• CVE-2022-23451An authorization flaw was found in openstack-barbican. The d…8.1
• CVE-2022-23453Potential security vulnerabilities have been identified in H…7.8
• CVE-2022-23454Potential security vulnerabilities have been identified in H…7.8
• CVE-2022-23455Potential security vulnerabilities have been identified in H…7.8
• CVE-2022-23456Potential arbitrary file deletion vulnerability has been ide…5.5
• CVE-2022-23457ESAPI (The OWASP Enterprise Security API) is a free, open so…9.8
• CVE-2022-23458Toast UI Grid is a component to display and edit data. Versi…6.1