CVE-2022-3101: Openstack Tripleo Ansible

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file, leading to information disclosure of important configuration details from the OpenStack deployment.

Affected products

• Openstack Tripleo Ansible: affected versions not specified
• Red Hat Openstack: version 16.1 only; version 16.2 only
• Red Hat Openstack For IBM Power: version 16.1 only; version 16.2 only

Published 2023-03-23. Last modified 2026-06-17.