Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:tripleo-ansible:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductTripleo Ansible (147f6441-43b7-51c0-bcd6-c82c876485c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3146 vulnerable 2026-06-08 05:47:19.554992 Details available
A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment.
Published: 2023-03-23T00:00:00.000Z
Updated: 2025-02-25T15:41:22.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3101 vulnerable 2026-06-08 05:47:19.449981 Details available
A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file, leading to information disclosure of important configuration details from the OpenStack deployment.
Published: 2023-03-23T00:00:00.000Z
Updated: 2025-02-25T15:42:13.130Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31918 vulnerable 2026-06-08 05:31:54.355148 Details available
A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log file is readable to all users during stack update and creation. The highest threat from this vulnerability is to data confidentiality.
Published: 2021-05-06T16:23:06.000Z
Updated: 2024-08-03T23:10:30.968Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.