Vulnerability Database
289,599
Total vulnerabilities in the database
CVE-2022-3146
A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment.
| Software | From | Fixed in |
|---|---|---|
| redhat / openstack | 16.1 | 16.1.x |
| redhat / openstack | 16.2 | 16.2.x |
| redhat / openstack_for_ibm_power | 16.1 | 16.1.x |
| redhat / openstack_for_ibm_power | 16.2 | 16.2.x |
tripleo-ansible
|
- | 6.0.0.x |