CVE-2026-90461

Опубликовано: 11 сент. 2026

Источник: nvd

CVSS3: 6.3

EPSS Низкий

Описание

OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) Basic Authentication.

Ссылки

https://bugs.launchpad.net/ironic/+bug/2162816

EPSS

Процентиль: 11%

0.00207

Низкий

6.3 Medium

CVSS3

Дефекты

CWE-923

Связанные уязвимости

CVE-2026-90461

CVSS3: 6.3

ubuntu

1 день назад

OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) Basic Authentication.

CVE-2026-90461

CVSS3: 6.3

redhat

3 дня назад

OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) Basic Authentication.

CVE-2026-90461

CVSS3: 6.3

debian

3 дня назад

OpenStack Ironic through 38.0.0 may send a username and password to an ...

GHSA-mpf9-7jmw-7hrh

CVSS3: 6.3

github

3 дня назад

OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) Basic Authentication.

EPSS

Процентиль: 11%

0.00207

Низкий

6.3 Medium

CVSS3

Дефекты

CWE-923