Read the docs
TI-2022-17774 Aliases CVE-2022-38060GHSA-rvxr-pf5f-j2qj

Improper privilege management in OpenStack

Priority LOW 39CWE-269Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Privilege escalation, Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 1 fixed, 4 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-269 and CWE-426.

Summary

A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618. A misconfiguration in /etc/sudoers within a container can lead to increased privileges.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00219 12th percentileScored 2026-11-07
Fix Partial kolla (PyPI): 15.0.0.0rc1Red Hat: 2 advisoriesRed Hat: 1 fixed, 4 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OpenStackOpenStackgit master 05194e7618—No fix listedCNA
—kolla (PyPI)before 15.0.0.0rc115.0.0.0rc1Patch availableGHSA-rvxr-pf5f-j2qj
  • OpenStack VendorOpenStack Affected git master 05194e7618 Fixed in — No fix listed CNA
  • kolla (PyPI) Vendor— Affected before 15.0.0.0rc1 Fixed in 15.0.0.0rc1 Patch available GHSA-rvxr-pf5f-j2qj

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:openstack:kolla:-:*:*:*:*:*:*:*not specified by NVDVulnerableOpenStack
  • cpe:2.3:a:openstack:kolla:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·OpenStack

Remediation

  • Fix · GHSA-rvxr-pf5f-j2qj kolla (PyPI) Fixed in 15.0.0.0rc1 Advisory →

Red Hat 2 advisories

  • RHSA-2024:0191 Released 2024-01-16 · Red Hat rating Moderate
    Red Hat OpenStack Platform 17.1 (openstack-tripleo-common) security update
    • Red Hat OpenStack Platform 17.1 openstack-tripleo-common-15.4.1-17.1.20230927003755.el8ost, openstack-tripleo-common-container-base-15.4.1-17.1.20230927003755.el8ost, openstack-tripleo-common-containers-15.4.1-17.1.20230927003755.el8ost +1
  • RHSA-2024:0216 Released 2024-01-16 · Red Hat rating Moderate
    Red Hat OpenStack Platform 17.1 (openstack-tripleo-common) security update
    • Red Hat OpenStack Platform 17.1 openstack-tripleo-common-15.4.1-17.1.20230927010819.el9ost, openstack-tripleo-common-container-base-15.4.1-17.1.20230927010819.el9ost, openstack-tripleo-common-containers-15.4.1-17.1.20230927010819.el9ost +2

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenStack Platform 16.1AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 16.2AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 17.0AffectedNo fix planned: Out of support scope
Red Hat OpenStack Platform 18.0AffectedNo fix yet
Red Hat OpenStack Platform 17.1Fixed RHSA-2024:0191, RHSA-2024:0216

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-38060
  2. 2026-10-03 Alias added: GHSA-rvxr-pf5f-j2qj

References

Advisory 2

Other 4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences