CVE-2021-31918

7.5 highEPSS 1.0%

High (7.5) in redhat openstack. EPSS 1.0% chance of exploitation in the next 30 days.

A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log file is readable to all users during stack update and creation. The highest threat from this vulnerability is to data confidentiality.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWEs: CWE-732, CWE-200
Published: 2021-05-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:openstack

References

https://bugzilla.redhat.com/show_bug.cgi?id=1954250
https://bugzilla.redhat.com/show_bug.cgi?id=1954250

Check your stack JSON