Skip to content
OpenAdvisories
Medium RHSA-2022:6969 2 CVEs

Red Hat Security Advisory: Red Hat OpenStack Platform (tripleo-ansible) security update

Published Sep 16, 2024 · Updated Aug 8, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenStack 16 openstack:16.1::el8 python3-tripleo-common 0:11.4.1-1.20211201113404.el8ost
Red Hat · OpenStack 16 openstack:16.1::el8 tripleo-ansible 0:0.5.1-1.20220114163454.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 python3-tripleo-common 0:11.7.1-2.20220318011206.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 tripleo-ansible 0:0.8.1-2.20220406160116.el8ost

Vulnerabilities 2

  • Medium 5.5
    CVE-2022-3101

    tripleo-ansible may disclose important configuration details from an OpenStack deployment

    A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file, l…

    tripleo-ansible PyPI
  • Medium 5.5
    CVE-2022-3146

    tripleo-ansible may disclose important configuration details from an OpenStack deployment

    A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. T…

    tripleo-ansible PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2120660
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2123767
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2123870
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2124721
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2124732
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2130109
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2130598
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6969.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-3101
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-3101
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-3101
  • report
    https://access.redhat.com/security/cve/CVE-2022-3146
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-3146
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-3146