Em resumo
- CVE-2022-3146 é uma vulnerabilidade MÉDIO (CVSS 5.5) que afeta tripleo-ansible, openstack (redhat), openstack for ibm power (redhat).
- Chance de exploração nos próximos 30 dias (EPSS): 0.20%, maior que 10.2% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
Description
A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment.
NVD description
A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment.
Mais vulnerabilidades de tripleo-ansible
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free