Known vulnerabilities in openstack-tripleo-common (Red Hat package)

Vendor: Red Hat Inc.
Software: openstack-tripleo-common (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:openstack-tripleo-common_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openstack-tripleo-common (Red Hat package) openstack-tripleo-common (Red Hat package) is affected by 4 known vulnerabilities: 2 medium, 2 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100769 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-8007		 CWE-300 Medium
No
No
 15.4.1-17.1.20240911093743.e5b18f2.el8ost, 15.4.1-17.1.20240911100820.e5b18f2.el9ost 21.11.2024 SB2024112158
SB2024112164
#VU87916 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29156		 CWE-200 Medium
No
No
 11.7.1-2.20230809225405.e189622.el8ost 29.03.2024 SB2024032948
SB2024032949
SB2024032950
and 6 more
#VU68863 - Incorrect Default Permissions
CVE-2022-3146		 CWE-276 Low
No
No
 11.7.1-2.20220318011206.el8ost, 11.4.1-1.20211201113404.el8ost 31.10.2022 SB2022103149
#VU68862 - Incorrect Default Permissions
CVE-2022-3101		 CWE-276 Low
No
No
 11.7.1-2.20220318011206.el8ost, 11.4.1-1.20211201113404.el8ost 31.10.2022 SB2022103149