CVE-2022-3101

2023-03-2300:00:00

CWE-22

redhat

www.cve.org

tripleo-ansible

information disclosure

openstack deployment

5.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.0%

JSON

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file, leading to information disclosure of important configuration details from the OpenStack deployment.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "tripleo-ansible",
    "versions": [
      {
        "version": "unknown",
        "status": "affected"
      }
    ]
  }
]