HIGH🇵🇱 Wersja polska

CVE-2022-3596

CVSS 7.5v3.1pub. 2023-09-20upd. 2024-11-21

An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Red Hat Openstack Platform

    APP
    Redhat
    13.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-10731CRITICAL9.9PL ✓same product

Brak SELinux w kontenerze nova_libvirt w Red Hat OpenStack Platform 16

CVE-2024-8007HIGH8.1same product

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director....

CVE-2023-1625HIGH7.4same product

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker ...

CVE-2023-1108HIGH7.5same product

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected han...

CVE-2023-3354HIGH7.5same product

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whethe...