CVE-2022-3596 Instack-undercloud: rsync leaks information to undercloud
Unauthenticated attackers can access sensitive undercloud data, potentially exposing administrator credentials and compromising the OpenStack environment.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-3596?
CVE-2022-3596 is a high-severity vulnerability in Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUS, published on 20 Sep 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials.
Weakness: CWE-402
Which versions are affected by CVE-2022-3596?
It affects 1 product.
Linux distribution packages (1)
instack-undercloud Red Hat:openstack:13::el7 | All versions | 0:8.4.9-13.el7ost |
Products include Redhat Openstack Platform.
How do I fix CVE-2022-3596?
Apply the vendor's patch.
Is CVE-2022-3596 being exploited?
There is no known exploitation of CVE-2022-3596 in the wild and no public exploit code.
Other vulnerabilities in Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUS
- CVE-2020-10731 Misconfiguration in nova libvirt container provided by the Red Hat OpenStack Platform
- CVE-2024-8007 Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors
- CVE-2017-15114 Missing authorization in n/a
- CVE-2023-6725 Tripleo-ansible: bind keys are world readable
- CVE-2022-3261 Plain-text passwords saved in /var/log/messages
Sources
Also known as GHSA-788f-3f4f-vv6f, RHSA-2022:8897.