Zaqar
Monthly
Authentication bypass in OpenStack Zaqar through version 22.0.0 allows network-reachable attackers without credentials to circumvent access controls by supplying a crafted EXTRA-SPEC HTTP header paired with a known queue UUID. The root cause is CWE-306 (Missing Authentication for Critical Function), meaning the service fails to enforce credential validation on certain request paths when this header is present. No public exploit code has been identified at time of analysis and no CISA KEV listing exists, but the network-accessible nature of Zaqar's REST API makes this a meaningful risk for deployments where queue UUIDs may be discoverable through logs or enumeration.
Authentication bypass in OpenStack Zaqar through version 22.0.0 allows network-reachable attackers without credentials to circumvent access controls by supplying a crafted EXTRA-SPEC HTTP header paired with a known queue UUID. The root cause is CWE-306 (Missing Authentication for Critical Function), meaning the service fails to enforce credential validation on certain request paths when this header is present. No public exploit code has been identified at time of analysis and no CISA KEV listing exists, but the network-accessible nature of Zaqar's REST API makes this a meaningful risk for deployments where queue UUIDs may be discoverable through logs or enumeration.