Skip to content
OpenAdvisories

Package · Go

github.com/metal3-io/baremetal-operator

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.9
    CVE-2024-43803

    BMO can expose particularly named secrets from other namespaces via BMH CRD

    The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3. The `BareMetalHost` (BMH) CRD allows the `userData`, `metaData`, and `networkData` for the provisioned host to be specified as links to Kubernetes Secrets. Ther…

    metal3-io baremetal-operator github.com/metal3-io/baremetal-operator Go
  • Medium 6.0
    CVE-2023-30841

    Ironic and ironic-inspector deployed within Baremetal Operator may expose as ConfigMaps

    Baremetal Operator (BMO) is a bare metal host provisioning integration for Kubernetes. Prior to version 0.3.0, ironic and ironic-inspector deployed within Baremetal Operator using the included `deploy.sh` store their `.htpasswd` files as ConfigMaps instead of…

    metal3-io baremetal-operator github.com/metal3-io/baremetal-operator Go