Описание
OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:openstack:ironic_inspector:*:*:*:*:*:*:*:*
EPSS
Процентиль: 74%
0.01598
Низкий
6.8 Medium
CVSS2
Дефекты
CWE-254
Связанные уязвимости
redhat
почти 11 лет назад
OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error.
debian
больше 10 лет назад
OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), ...
CVSS3: 8.1
github
около 7 лет назад
Injection vulnerability that affects ironic-discoverd
EPSS
Процентиль: 74%
0.01598
Низкий
6.8 Medium
CVSS2
Дефекты
CWE-254