VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Mar 23, 2023· Updated Jun 17, 2026

CVE-2022-3101

CVE-2022-3101

Description

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file, leading to information disclosure of important configuration details from the OpenStack deployment.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
tripleo-ansiblePyPI
<= 6.0.0—

Affected products

7
  • OpenStack/Tripleo Ansible
    cpe:2.3:a:openstack:tripleo_ansible:-:*:*:*:*:*:*:*
  • Red Hat/Openstack2 versions
    cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:16.2:-:*:*:*:*:*:*
  • Red Hat/Openstack For Ibm Power2 versions
    cpe:2.3:a:redhat:openstack_for_ibm_power:16.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:redhat:openstack_for_ibm_power:16.1:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack_for_ibm_power:16.2:*:*:*:*:*:*:*
  • OpenStack/tripleo-ansibledescription
  • ghsa-coords
    pkg:pypi/tripleo-ansible
    Range: <= 6.0.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.