CVE-2022-3596
High
Published: 20 September 2023
Published
20 September 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.0029
53.0th percentile
Risk Priority
15
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2022-3596 is a high-severity Resource Leak (CWE-402) vulnerability in Redhat Openstack Platform. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 47.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-42960
Vulnerability details
An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
redhat
openstack platform
13.0
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.