Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24

Export CSV
CVE-2025-44021

openstack-ironic: unsafe image file:// paths

OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can provide a path to any local file (readable by ironic-conductor), which may then be written to the target node disk. This is difficult to exploit in practice, because a node deployed in this manner should never reach the ACTIVE state, but it still represents a danger in environments running with non-default, insecure configurations such as with automated cleaning disabled. The fixed versions are 24.1.3, 26.1.1, and 29.0.1.

CVSS 3.1 · 2.8 Low EPSS < 1% KEV · Not listed
Vendors
Openstack
Products
Ironic
CVE-2015-7514

openstack-ironic: Ironic does not honor clean steps

OpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after use, which allows remote authenticated users to obtain sensitive information.

CVSS 3.0 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Openstack
Products
Ironic
CVE-2015-5306

openstack-ironic-discoverd: potential remote code execution with debug mode enabled

OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error.

CVSS 2.0 · 6.8 Medium EPSS 1.6% KEV · Not listed
Vendors
Openstack Redhat
Products
Ironic Inspector Openstack Openstack-director
CVE-2019-10141

openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's node_cache.find_node(). This function makes a SQL query using unfiltered data from a server reporting inspection results (by a POST to the /v1/continue endpoint). Because the API is unauthenticated, the flaw could be exploited by an attacker with access to the network on which ironic-inspector is listening. Because of how ironic-inspector uses the query results, it is unlikely that data could be obtained. However, the attacker could pass malicious data and create a denial of service.

CVSS 3.0 · 8.3 High EPSS 2.5% KEV · Not listed
Vendors
Openstack Redhat
Products
Ironic-inspector Enterprise Linux Openstack and 1 more