CVE-2022-3146
A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment.
| Software | From | Fixed in |
|---|---|---|
| redhat / openstack | 16.1 | 16.1.x |
| redhat / openstack | 16.2 | 16.2.x |
| redhat / openstack_for_ibm_power | 16.1 | 16.1.x |
| redhat / openstack_for_ibm_power | 16.2 | 16.2.x |
tripleo-ansible
|
- | 6.0.0.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime