Product

Canonical openstack ironic vulnerabilities

1 published CVE affecting Canonical openstack ironic, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest Canonical openstack ironic CVEs

Newest publication first

CVE-2016-4985 OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor
Published 2016-07-12

HighCVSS 7.5 EPSS 2.9%

The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafte...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

Canonical openstack ironic vulnerabilities

Latest Canonical openstack ironic CVEs

CVE-2016-4985 OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor