CVE-2022-23451: An authorization flaw was found in openstack-barbican

This month

HIGH 8.1WATCHLISTUPGRADEDOWNGRADE

CVE-2022-23451 is a high-severity flaw (CVSS 8.1) affecting barbican, openstack platform. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete protected data, causing a denial of service by consuming protected resources.

Why this priority

High severity
On your watchlist

A fixed release or distro patch exists.

Risk facts

CVSS score	8.1 (High)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	Low
User interaction	None
EPSS exploit chance	1.3% (top 30%)
CISA exploited list	No
Weakness	CWE-863
Published	2022-09-06
Last modified	2026-06-17

Publisher (CNA): Red Hat, Inc. · Vendor: openstack · redhat

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2022-09-06 18:15 UTCPublished CVE record published
2026-06-17 04:30 UTCUpdated Record last modified

openstack barbican UPGRADE

Affected: < 14.0.0

Fixed in: 14.0.0

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy barbican || rpm -q barbican || barbican --version

2. UPGRADE to 14.0.0 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade barbican

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade barbican

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

redhat openstack platform DOWNGRADE

Affected: 13.0 · 16.1 · 16.2

Fixed in: no fixed release known

Safe to downgrade to: a release before 13.0

1. Check installed version

apt-cache policy openstack-platform || rpm -q openstack-platform || openstack-platform --version

2. No fixed release: DOWNGRADE to a release before 13.0 (Debian / Ubuntu)

apt-cache madison openstack-platform sudo apt install openstack-platform=<VERSION_BEFORE_13.0> sudo apt-mark hold openstack-platform

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list openstack-platform sudo dnf downgrade openstack-platform-<VERSION_BEFORE_13.0> sudo dnf versionlock add openstack-platform

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2022-23451?

barbican: upgrade to 14.0.0; openstack platform: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2022-23451 being exploited?

CVE-2022-23451 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2022-23451 affect?

CVE-2022-23451 affects barbican, openstack platform. Severity is high (CVSS 8.1). An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attac

How urgent is CVE-2022-23451?

Priority 51/100. High severity; On your watchlist

Software pages

OpenStack vulnerabilities

Related CVEs

CVE-2023-1636 MEDIUM 6.0 MITIGATE DOWNGRADE A vulnerability was found in OpenStack Barbican containers
CVE-2023-1633 MEDIUM 6.6 MITIGATE DOWNGRADE A credentials leak flaw was found in OpenStack Barbican
CVE-2022-3100 MEDIUM 5.9 MITIGATE DOWNGRADE A flaw was found in the openstack-barbican component
CVE-2022-23452 MEDIUM 4.9 UPGRADE DOWNGRADE An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a

References

← Back to latest CVEs