ironic vulnerabilities (Ubuntu)
21 vulnerabilities.
-
ironicUbuntu OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete... 5.4 Medium -
ironicUbuntu OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a... 5.0 Medium -
ironicUbuntu OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host... 6.3 Medium -
ironicUbuntu In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning... 6.3 Medium -
ironicUbuntu In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can... 5.0 Medium -
ironicUbuntu In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI... 8.2 High -
ironicUbuntu OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project... 5.5 Medium -
ironicUbuntu OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties 6.8 Medium -
ironicUbuntu OpenStack Ironic: Crafted JSON String to Certain Endpoints on the API or JSON-RPC Service May Result in Service Crash 5.3 Medium -
ironicUbuntu OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image 5.9 Medium -
ironicUbuntu OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read... 4.9 Medium -
ironicUbuntu OpenStack Ironic allows Boot Script Injection 5.8 Medium -
ironicUbuntu OpenStack Ironic: Pre-Validation Checksum Calculation allows Denial of Service (DoS) via Infinite Block Devices 4.3 Medium -
ironicUbuntu In OpenStack Ironic through 35.x, instance_info['ks_template'] is rendered without sandboxing. 3.0 Low -
ironicUbuntu OpenStack Ironic has an Incorrect Resource Transfer Between Spheres 7.7 High -
ironicUbuntu OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere 6.6 Medium -
ironicUbuntu OpenStack Ironic fails to restrict paths used for file:// image URLs 2.8 Low -
ironicUbuntu OpenStack Ironic fails to verify checksums of supplied image_source URLs 5.3 Medium -
ironicUbuntu Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update 4.3 Medium -
ironicUbuntu A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be... 6.5 Medium -
ironicUbuntu OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor 7.5 High