CVE-2016-4985 describes an information disclosure vulnerability in the ironic-api service of OpenStack Ironic, affecting versions before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka), including Canonical and Red Hat distributions. An unauthenticated remote attacker can obtain sensitive node information by sending a crafted POST request to the vendor_passthru resource, provided they know a registered node's MAC address. This vulnerability carries a CVSS v3.0 score of 7.5 (High), indicating high confidentiality impact with low attack complexity and no user interaction required. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
7.0CPE matchmatch criteria | cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:* | ||
8CPE matchmatch criteria | cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:* | ||
<= 4.2.4CPE matchmatch criteria | cpe:2.3:a:canonical:openstack_ironic:*:*:*:*:*:*:*:* | ||
5.1.0CPE matchmatch criteria | cpe:2.3:a:canonical:openstack_ironic:5.1.0:*:*:*:*:*:*:* | ||
5.1.1CPE matchmatch criteria | cpe:2.3:a:canonical:openstack_ironic:5.1.1:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.