GCVE - cpe:2.3:a:redhat:openstack:16.2:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:openstack:16.2:-:*:*:*:*:*:*

part: a version: 16.2 update: -

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Openstack (`a929fd3f-07e0-586b-9a84-4d48395fa8bc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openstack/openstack`	purl2cpe	2026-06-01 10:12:53.021982

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-4134`	vulnerable	2026-06-08 05:51:36.844487	Details available A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images. Published: 2023-03-06T00:00:00.000Z Updated: 2025-03-06T19:53:42.138Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=2147462 https://bugs.launchpad.net/glance/+bug/1990157 https://wiki.openstack.org/wiki/OSSN/OSSN-0090	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3146`	vulnerable	2026-06-08 05:47:19.555233	Details available A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment. Published: 2023-03-23T00:00:00.000Z Updated: 2025-02-25T15:41:22.806Z Open on db.gcve.eu Reference links https://access.redhat.com/security/cve/CVE-2022-3146	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3101`	vulnerable	2026-06-08 05:47:19.451030	Details available A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file, leading to information disclosure of important configuration details from the OpenStack deployment. Published: 2023-03-23T00:00:00.000Z Updated: 2025-02-25T15:42:13.130Z Open on db.gcve.eu Reference links https://access.redhat.com/security/cve/CVE-2022-3101	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3100`	vulnerable	2026-06-08 05:47:19.444524	Details available A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API. Published: 2023-01-18T00:00:00.000Z Updated: 2025-04-03T19:26:10.275Z Open on db.gcve.eu Reference links https://access.redhat.com/security/cve/CVE-2022-3100	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2447`	not_vulnerable	2026-06-08 05:43:35.576460	Details available A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected. Published: 2022-09-01T20:30:20.000Z Updated: 2024-08-03T00:39:07.647Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=2105419 https://access.redhat.com/security/cve/CVE-2022-2447	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-4180`	vulnerable	2026-06-08 05:38:08.631194	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.