CVE-2016-4985

The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the v1/drivers/$DRIVER_NAME/vendor_passthru resource.

Score

CVSS 3.0 7.5 High

Status

Modified - secalert@redhat.com

Published

2016-07-12

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Openstack Ironic (Canonical)
• Openstack (Redhat)

References

• http://www.openwall.com/lists/oss-security/2016/06/21/6
• https://access.redhat.com/errata/RHSA-2016:1377
• https://access.redhat.com/errata/RHSA-2016:1378
• https://bugs.launchpad.net/ironic/+bug/1572796
• https://review.openstack.org/332195
• https://review.openstack.org/332196
• https://review.openstack.org/332197