CVE-2022-3146

State: Published
Severity: Not scored
Published: Mar 23, 2023
Updated: Feb 25, 2025
Reserved: Sep 6, 2022

Description

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment.

Scores

The record has no CVSS score.

Weaknesses

CWE-22 >CWE-276->CWE-732

Affected Products

Product	Versions
tripleo-ansiblen/a	unkownAffected

References

https://access.redhat.com/security/cve/CVE-2022-3146

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.