Skip to content
OpenAdvisories

Vendor

metal3-io

6 known vulnerabilities.

Products

baremetal-operator 3 ironic-image 2 ip-address-manager 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2023-40585

    Unauthenticated access to Ironic API

    ironic-image is a container image to run OpenStack Ironic as part of Metal³. Prior to version capm3-v1.4.3, if Ironic is not deployed with TLS and it does not have API and Conductor split into separate services, access to the API is not protected by any authe…

    metal3-io ironic-image