Description
OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.
CVSS 4.8EPSS 0.294%Risk 0.49
View source- Published
- 2026-07-24 05:16:49
- Affected versions
- <=22.0.0
- Type
- Critical software
- Last modified
- 2026-07-30 19:32:25
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L