Red Hat Security Advisory

RHSA-2016:1377

openstack-ironic security update

Released 2016-07-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 openstack-ironic-2015.1.2-4.el7ost, openstack-ironic-api-2015.1.2-4.el7ost, openstack-ironic-common-2015.1.2-4.el7ost +1

Fixes 1 record

TI-2016-04306 CVE-2016-4985 · GHSA-f7cr-7c2c-fm8r

The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2…

LOW 38

The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address o…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0286 Published 2016-07-12 Partial fix · 4.2.5, 5.1.2 CWE-200