Description (CNA)
An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / Red Hat OpenStack Platform 13.0 - ELS | unaffected 0:8.4.9-13.el7ost before * |
| Red Hat / Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUS | unaffected 0:8.4.9-13.el7ost before * |
CWE
CWE-402
References
- https://access.redhat.com/errata/RHSA-2022:8897
- https://access.redhat.com/security/cve/CVE-2022-3596
- https://bugzilla.redhat.com/show_bug.cgi?id=2136596
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.