tree 195520dfc0e41e3fa1224ff44eb25adceca62bbd
parent 519aa80cabe83cd8c2193d483f5dff5213a66719
author millevy <millevy@redhat.com> 1666868089 +0000
committer millevy <millevy@redhat.com> 1670400062 +0000

Introduce a new test for "cve_2022_3100"

The exploit is that a malicious user with a Keystone account is able to decrypt
any secret as long as they know the secret's ID by using a specifically crafted
query string:
GET /v1/secrets/{secret-id}/payload?target.secret.read=read

Change-Id: I5e00a188268ef1c25eed8bf3a37197918e529427