CVE-2022-3101 - Redhat Openstack, Openstack Tripleo Ansible and Redhat Openstack For Ibm Power

Moderate 5.5

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file, leading to information disclosure of important configuration details from the OpenStack deployment.

Affected software

Redhat Openstack

Openstack Tripleo Ansible

Redhat Openstack For Ibm Power

Reference links

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.