Описание
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ironic | fixed | 1:35.0.1-5 | package |
Примечания
https://www.openwall.com/lists/oss-security/2026/06/03/13
https://bugs.launchpad.net/ironic/+bug/2148319
Связанные уязвимости
CVSS3: 4.9
ubuntu
2 месяца назад
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template.
CVSS3: 4.9
nvd
2 месяца назад
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template.
CVSS3: 4.9
github
2 месяца назад
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template.