7.5
High
CVE-2022-3596 An information leak was found in OpenStack's undercloud
Description
An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat OpenStack Platform 13.0 - ELS | Versions not published | |
| Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUS | Versions not published |
References
- RHSA-2022:8897 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2136596 bugzilla.redhat.com
Timeline
- Published
- Last modified