CVE-2022-3596

EUVD-2022-42960
An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials.
Resource Leak
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
redhatCNA
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
Affected Products (NVD)
VendorProductVersion
redhatopenstack_platform
13.0
redhatopenstack_platform
13.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2022:8897
https://access.redhat.com/security/cve/CVE-2022-3596
https://bugzilla.redhat.com/show_bug.cgi?id=2136596
https://access.redhat.com/errata/RHSA-2022:8897
https://access.redhat.com/security/cve/CVE-2022-3596
https://bugzilla.redhat.com/show_bug.cgi?id=2136596