High severity7.5NVD Advisory· Published Sep 20, 2023· Updated Jun 17, 2026

CVE-2022-3596

Description

An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSv5
cpe:/a:redhat:openstack:13::el7
Range: 0:8.4.9-13.el7ost
Red Hat/Openstack2 versions
cpe:2.3:a:redhat:openstack_platform:13.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:openstack_platform:13.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openstack_platform:13.0:*:*:*:els:*:*:*
OpenStack/Instack Undercloudllm-fuzzy

Patches

Vulnerability mechanics

References

access.redhat.com/errata/RHSA-2022:8897nvdVendor Advisory
access.redhat.com/security/cve/CVE-2022-3596nvdMitigationVendor Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000