CVE-2022-3101CWE-22

A flaw was found in tripleo-ansible

published March 23, 2023

CVSS
—
EPSS
0%
Percentile
9.7
In the wild
Unconfirmed
What it is

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file, leading to information disclosure of important configuration details from the OpenStack deployment.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.7th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2023-03-23T00:00Z
EPSS history
Timeline
  • 23 MAR 00:00Z
    A flaw was found in tripleo-ansible
    cvelistv5