OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 4.3.0, < 26.1.6CPE matchmatch criteria | cpe:2.3:a:openstack:ironic:*:*:*:*:*:*:*:* | ||
>= 27.0.0, < 29.0.5CPE matchmatch criteria | cpe:2.3:a:openstack:ironic:*:*:*:*:*:*:*:* | ||
>= 30.0.0, < 32.0.1CPE matchmatch criteria | cpe:2.3:a:openstack:ironic:*:*:*:*:*:*:*:* | ||
>= 33.0.0, < 35.0.1CPE matchmatch criteria | cpe:2.3:a:openstack:ironic:*:*:*:*:*:*:*:* | ||
>= 4.3.0, <= 26.1.6CPE match | cpe:2.3:a:openstack:ironic:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.3 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.