Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 (instack-undercloud) security update

Fixed packages 1

Vulnerabilities 1

• High 7.5
  CVE-2022-3596

  Instack-undercloud: rsync leaks information to undercloud

  An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administr…

  Red Hat Red Hat OpenStack Platform 13.0 - ELS Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUS
  Sep 20, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2136596
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8897.json
• report
  https://access.redhat.com/security/cve/CVE-2022-3596
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-3596
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-3596