Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:openstack_for_ibm_power:16.1:*:*:*:*:*:*:*

part: a version: 16.1 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductOpenstack For Ibm Power (ea720e42-e797-5dc9-bce1-25caa70ea406)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3146 vulnerable 2026-06-08 05:47:19.555253 Details available
A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment.
Published: 2023-03-23T00:00:00.000Z
Updated: 2025-02-25T15:41:22.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3101 vulnerable 2026-06-08 05:47:19.451053 Details available
A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file, leading to information disclosure of important configuration details from the OpenStack deployment.
Published: 2023-03-23T00:00:00.000Z
Updated: 2025-02-25T15:42:13.130Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3100 vulnerable 2026-06-08 05:47:19.446657 Details available
A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.
Published: 2023-01-18T00:00:00.000Z
Updated: 2025-04-03T19:26:10.275Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9490 vulnerable 2026-06-08 05:28:02.036736 Details available
Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability for unpatched servers.
Published: 2020-08-07T15:24:49.000Z
Updated: 2024-08-04T10:26:16.299Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.