GCVE - cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:*

part: a version: 16.1 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Openstack (`a929fd3f-07e0-586b-9a84-4d48395fa8bc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openstack/openstack`	purl2cpe	2026-06-01 10:12:53.021980

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-4134`	vulnerable	2026-06-08 05:51:36.843446	Details available A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images. Published: 2023-03-06T00:00:00.000Z Updated: 2025-03-06T19:53:42.138Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=2147462 https://bugs.launchpad.net/glance/+bug/1990157 https://wiki.openstack.org/wiki/OSSN/OSSN-0090	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3146`	vulnerable	2026-06-08 05:47:19.555209	Details available A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment. Published: 2023-03-23T00:00:00.000Z Updated: 2025-02-25T15:41:22.806Z Open on db.gcve.eu Reference links https://access.redhat.com/security/cve/CVE-2022-3146	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3101`	vulnerable	2026-06-08 05:47:19.450883	Details available A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file, leading to information disclosure of important configuration details from the OpenStack deployment. Published: 2023-03-23T00:00:00.000Z Updated: 2025-02-25T15:42:13.130Z Open on db.gcve.eu Reference links https://access.redhat.com/security/cve/CVE-2022-3101	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3100`	vulnerable	2026-06-08 05:47:19.443597	Details available A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API. Published: 2023-01-18T00:00:00.000Z Updated: 2025-04-03T19:26:10.275Z Open on db.gcve.eu Reference links https://access.redhat.com/security/cve/CVE-2022-3100	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2447`	not_vulnerable	2026-06-08 05:43:35.575511	Details available A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected. Published: 2022-09-01T20:30:20.000Z Updated: 2024-08-03T00:39:07.647Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=2105419 https://access.redhat.com/security/cve/CVE-2022-2447	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-4180`	vulnerable	2026-06-08 05:38:08.630434	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-3620`	vulnerable	2026-06-08 05:33:53.195412	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31918`	vulnerable	2026-06-08 05:31:54.356157	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-9490`	vulnerable	2026-06-08 05:28:02.035823	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25717`	vulnerable	2026-06-08 05:23:49.178718	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14355`	vulnerable	2026-06-08 05:19:23.096935	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2124`	vulnerable	2026-06-08 05:07:33.323989	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.