VULNERABILITY INTELLIGENCE

CVE-2022-3596

CVSS score7.5 HIGH
EPSS probability1.11%
CISA KEVNot currently listed
Published2023-09-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials.

Weakness classification

  • CWE-402: Transmission of Private Resources into a New Sphere ('Resource Leak')

Primary references