ironic vulnerabilities (Debian)
23 vulnerabilities.
-
ironicDebian OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete... 5.4 Medium -
ironicDebian OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a... 5.0 Medium -
ironicDebian OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a... 4.3 Medium -
ironicDebian OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host... 6.3 Medium -
ironicDebian In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning... 6.3 Medium -
ironicDebian In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can... 5.0 Medium -
ironicDebian In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI... 8.2 High -
ironicDebian OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project... 5.5 Medium -
ironicDebian OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties 6.8 Medium -
ironicDebian OpenStack Ironic: Crafted JSON String to Certain Endpoints on the API or JSON-RPC Service May Result in Service Crash 5.3 Medium -
ironicDebian OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image 5.9 Medium -
ironicDebian OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read... 4.9 Medium -
ironicDebian OpenStack Ironic allows Boot Script Injection 5.8 Medium -
ironicDebian OpenStack Ironic: Pre-Validation Checksum Calculation allows Denial of Service (DoS) via Infinite Block Devices 4.3 Medium -
ironicDebian In OpenStack Ironic through 35.x, instance_info['ks_template'] is rendered without sandboxing. 3.0 Low -
ironicDebian OpenStack Ironic has an Incorrect Resource Transfer Between Spheres 7.7 High -
ironicDebian OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere 8.0 High -
ironicDebian OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere 6.6 Medium -
ironicDebian OpenStack Ironic fails to restrict paths used for file:// image URLs 2.8 Low -
ironicDebian OpenStack Ironic fails to verify checksums of supplied image_source URLs 5.3 Medium -
ironicDebian Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update 4.3 Medium -
ironicDebian OpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after use, which allows remote... 6.5 Medium -
ironicDebian OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor 7.5 High