First published: Tue Apr 27 2021(Updated: )
A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log file is readable to all users during stack update and creation. The highest threat from this vulnerability is to data confidentiality.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Redhat Openstack | =16.1 | |
redhat/tripleo-ansible | <0.5.1 | 0.5.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2021-31918.
The severity of CVE-2021-31918 is high.
The affected software version is Red Hat Openstack 16.1.
The highest threat from CVE-2021-31918 is to data confidentiality.
Yes, you can find more information about CVE-2021-31918 [here](https://bugzilla.redhat.com/show_bug.cgi?id=1954250).