Advisories · Technology
OpenStack Ironic.
Every CVE that names OpenStack Ironic among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
OpenStack Ironic: OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g…
- OpenStack Ironic
- CWE-1287
- CVSS 5.0 Medium
OpenStack Ironic: OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting…
- OpenStack Ironic
- CWE-424
- CVSS 4.3 Medium
OpenStack Ironic: OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results…
- OpenStack Ironic
- CWE-409
- CVSS 6.3 Medium
OpenStack Ironic: OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote…
- OpenStack Ironic
- CWE-923
- CVSS 6.3 Medium
OpenStack Ironic: In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run…
- OpenStack Ironic
- CWE-226
- CVSS 5.0 Medium
Incorrect authorization in OpenStack Ironic
- OpenStack Ironic
- Broken access control
- CVSS 8.2 High
OpenStack Ironic: In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using…
- OpenStack Ironic
- CWE-424
- CVSS 5.5 Medium
Missing authorization in OpenStack Ironic
- OpenStack Ironic
- Broken access control
- CVSS 4.9 Medium
OpenStack Ironic: OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager…
- OpenStack Ironic
- CWE-669
- CVSS 3.0 Low
Template injection in OpenStack Ironic
- OpenStack Ironic
- Code injection