CVE-2022-3596

Advisory

Instack-undercloud is affected by CVE-2022-3596: This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials.
https://access.redhat.com/security/cve/CVE-2022-3596

Affected package

Affected versions

Fixed versions

Vulnerability changelog

An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials. See CVE-2022-3596.


MISC:RHBZ#2136596: https://bugzilla.redhat.com/show_bug.cgi?id=2136596
MISC:RHSA-2022:8897: https://access.redhat.com/errata/RHSA-2022:8897
MISC:https://access.redhat.com/security/cve/CVE-2022-3596: https://access.redhat.com/security/cve/CVE-2022-3596

Resources

• https://bugzilla.redhat.com/show_bug.cgi?id=2136596
• https://access.redhat.com/errata/RHSA-2022:8897
• https://access.redhat.com/security/cve/CVE-2022-3596
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3596