CVE:CVE-2022-3100
CNNVD:CNNVD-202209-2924
OpenStack是美国国家航空航天局（NASA）的一个云平台管理项目。barbican是 OpenStack 密钥管理服务，API 服务器。
OpenStack barbican存在安全漏洞，该漏洞源于组件中存在问题，此问题允许在访问API时通过查询字符串绕过访问策略。
solution:Upgrade openstack barbican to a higher version than -; Upgrade redhat openstack to a higher version than 13,16.1,16.2,17,and avoid the version 13,16.1,16.2,17; Upgrade redhat openstack_for_ibm_power to a higher version than 13,16.1,16.2,and avoid the version 13,16.1,16.2; Upgrade redhat openstack_platform to a higher version than 13.0,and avoid the version 13.0