Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-3596

Instack-undercloud: rsync leaks information to undercloud

Description

An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat OpenStack Platform 13.0 - ELS

Default version status: affected

  • 0:8.4.9-13.el7ost to < *unaffected

Red Hat Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUS

Default version status: affected

  • 0:8.4.9-13.el7ost to < *unaffected

References