CVE-2022-3596

7.5 highEPSS 1.1%

An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-402
Published: 2023-09-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:openstack_platform

References

https://access.redhat.com/errata/RHSA-2022:8897
https://access.redhat.com/security/cve/CVE-2022-3596
https://bugzilla.redhat.com/show_bug.cgi?id=2136596
https://access.redhat.com/errata/RHSA-2022:8897
https://access.redhat.com/security/cve/CVE-2022-3596

Check your stack JSON