What is CVE-2021-31918?

CVE-2021-31918 is a high-severity vulnerability in Red Hat OpenStack, classified under Information Disclosure. CVSS score: 7.5/10. Published 2021-05-06.

How severe is CVE-2021-31918?

High severity. CVSS v3 base score is 7.5 out of 10.

Information disclosure in Red Hat OpenStack

CVE-2021-31918

A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log file is readable to all users during stack update and creation. The highest threat from this vulnerability is to data confidentiality.

Vulnerability class: Information Disclosure

EPSS: 0.010 (59.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Redhat Openstack — versions 16.1
N/a Tripleo-ansible — versions As shipped in Red Hat Openstack 16.1

Weakness classification (CWE)

References

secalert@redhat.com (x_refsource_MISC, Issue Tracking, Vendor Advisory)

Frequently asked questions

What is CVE-2021-31918?: CVE-2021-31918 is a high-severity vulnerability in Red Hat OpenStack, classified under Information Disclosure. CVSS score: 7.5/10. Published 2021-05-06.
How severe is CVE-2021-31918?: High severity. CVSS v3 base score is 7.5 out of 10.