Red Hat Security Advisory

RHSA-2015:2685

openstack-ironic-discoverd security update

Released 2015-12-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 openstack-ironic-discoverd-0.2.5-2.el7ost

Fixes 1 record

TI-2015-04461 CVE-2015-5306 · GHSA-x64g-wjmw-w328

OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is…

LOW 33

OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01598 Published 2015-11-25 Fixed in 0.2.5, 2.2.2 CWE-254