CVE-2022-3596

An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials.

Score

CVSS 3.1 7.5 High

Status

Modified - secalert@redhat.com

Published

2023-09-20

Last modified

2024-08-03

Weaknesses

CWE-402

Affected products

• Openstack (Redhat)
• Openstack Platform (Redhat)

References

• https://access.redhat.com/errata/RHSA-2022:8897
• https://access.redhat.com/security/cve/CVE-2022-3596
• https://bugzilla.redhat.com/show_bug.cgi?id=2136596