VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Mar 23, 2023· Updated Jun 17, 2026

CVE-2022-3146

CVE-2022-3146

Description

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
tripleo-ansiblePyPI
<= 6.0.0—

Affected products

7
  • OpenStack/Tripleo Ansible
    cpe:2.3:a:openstack:tripleo_ansible:-:*:*:*:*:*:*:*
  • Red Hat/Openstack2 versions
    cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack:16.2:-:*:*:*:*:*:*
  • Red Hat/Openstack For Ibm Power2 versions
    cpe:2.3:a:redhat:openstack_for_ibm_power:16.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:redhat:openstack_for_ibm_power:16.1:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack_for_ibm_power:16.2:*:*:*:*:*:*:*
  • OpenStack/tripleo-ansibledescription
  • ghsa-coords
    pkg:pypi/tripleo-ansible
    Range: <= 6.0.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.