Skip to content
OpenAdvisories

Package · Ubuntu

ironic

21 known vulnerabilities.

3 results · Clear filters · Feed

  • High 8.2

    In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface …

  • High 7.7

    OpenStack Ironic has an Incorrect Resource Transfer Between Spheres

    An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenSta…

  • High 7.5

    OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor

    The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node…