CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. Exploitation may require the attacker to be authenticated. It may lead to a denial-of-service condition.
CVE
CVE-2022-23451
Severity
HIGH
CVSS
8.1
EPSS
1.01%
Original NVD Description
An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete protected data, causing a denial of service by consuming protected resources.
Related CVEs
Other vulnerabilities affecting the same vendor(s)