VULNERABILITY INTELLIGENCE

CVE-2022-3101

CVSS score5.5 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2023-03-23
Last modified2026-06-17

Description

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file, leading to information disclosure of important configuration details from the OpenStack deployment.