CVE-2022-3596CWE-402

Instack-undercloud: rsync leaks information to undercloud

High · published September 20, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01107 · 65.6th percentile
Weakness
CWE-402 · Transmission of Private Resources into a New Sphere ('Resource Leak')
Published
2023-09-20T19:06Z
EPSS history
Timeline
  • 20 SEP 19:06Z
    Instack-undercloud: rsync leaks information to undercloud
    cvelistv5