Skip to content
OpenAdvisories

Package · Go

github.com/metal3-io/ironic-standalone-operator

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    GHSA-hfc8-w5f4-3x6m

    Ironic Standalone Operator's controller modifies user-owned resources without consent

    ## Impact The Ironic Standalone Operator (IRSO) is the operator to maintain an Ironic deployment for Metal3. IRSO controller automatically adds its environment label to user-provided Secrets and ConfigMaps without the resource owner's consent. A high-privileg…

    github.com/metal3-io/ironic-standalone-operator Go
  • Medium 4.3
    GHSA-7cwm-fpfh-rrch

    Ironic Standalone Operator's prometheus metrics exporter bound to all interfaces

    ## Impact The Ironic Standalone Operator (IRSO) is the operator to maintain an Ironic deployment for Metal3. The Prometheus metrics exporter binds to 0.0.0.0 (all network interfaces) by default with no authentication. The default config is disabled. If enable…

    github.com/metal3-io/ironic-standalone-operator Go