A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2022-3146 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
30 Mar 2023, 16:38
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| References | (MISC) https://access.redhat.com/security/cve/CVE-2022-3146 - Vendor Advisory | |
| CPE | cpe:2.3:a:redhat:openstack_for_ibm_power:16.1:*:*:*:*:*:*:* cpe:2.3:a:openstack:tripleo_ansible:-:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack_for_ibm_power:16.2:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack:16.2:-:*:*:*:*:*:* |
|
| CWE | CWE-276 CWE-732 CWE-22 |
24 Mar 2023, 01:57
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-03-23 21:15
Updated : 2024-02-04 23:37
NVD link : CVE-2022-3146
Mitre link : CVE-2022-3146
CVE.ORG link : CVE-2022-3146
JSON object : View
Products Affected
openstack
- tripleo_ansible
redhat
- openstack
- openstack_for_ibm_power