CVE-2022-3101: Path Traversal
A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file, leading to information disclosure of important configuration details from the OpenStack deployment.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-3101?
CVE-2022-3101 is a vulnerability found in tripleo-ansible that allows a local attacker to discover a sensitive file through brute force, leading to information disclosure.
What is the severity of CVE-2022-3101?
The severity of CVE-2022-3101 is medium, with a severity value of 5.5.
Which software is affected by CVE-2022-3101?
The affected software includes Openstack Tripleo Ansible, Redhat Openstack versions 16.1 and 16.2, and Redhat Openstack For IBM Power versions 16.1 and 16.2.
How can a local attacker exploit CVE-2022-3101?
A local attacker can exploit CVE-2022-3101 by using brute force to explore the relevant directory and discover the sensitive file, leading to information disclosure.
Where can I find more information about CVE-2022-3101?
More information about CVE-2022-3101 can be found at: https://access.redhat.com/security/cve/CVE-2022-3101