Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXg2NGctd2ptdy13MzI4
Injection vulnerability that affects ironic-discoverd
OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error.
Permalink: https://github.com/advisories/GHSA-x64g-wjmw-w328JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXg2NGctd2ptdy13MzI4
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: over 5 years ago
Updated: 2 months ago
CVSS Score: 8.1
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Percentage: 0.00651
EPSS Percentile: 0.797
Identifiers: GHSA-x64g-wjmw-w328, CVE-2015-5306
References:
- https://nvd.nist.gov/vuln/detail/CVE-2015-5306
- https://access.redhat.com/errata/RHSA-2015:1929
- https://bugs.launchpad.net/ironic-inspector/+bug/1506419
- https://bugzilla.redhat.com/show_bug.cgi?id=1273698
- http://rhn.redhat.com/errata/RHSA-2015-2685.html
- https://opendev.org/openstack/ironic-inspector/commit/77d0052c5133034490386fbfadfdb1bdb49aa44f
- https://access.redhat.com/errata/RHSA-2015:2685
- https://access.redhat.com/security/cve/CVE-2015-5306
- https://github.com/pypa/advisory-database/tree/main/vulns/ironic-inspector/PYSEC-2015-28.yaml
- https://opendev.org/openstack/ironic-inspector/commit/2c64da2bee6eeea27c08eb7a94894feaa5494910
- https://github.com/advisories/GHSA-x64g-wjmw-w328
Affected Packages
pypi:ironic-inspector
Dependent packages: 0Dependent repositories: 8
Downloads: 5,595 last month
Affected Version Ranges: >= 0, < 2.2.2
Fixed in: 2.2.2
All affected versions: 2.0.0, 2.0.1, 2.1.0, 2.2.0, 2.2.1
All unaffected versions: 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.2.6, 2.2.7, 2.3.0, 3.0.0, 3.1.0, 3.2.0, 3.2.1, 3.2.2, 3.3.0, 4.0.0, 4.1.0, 4.2.0, 4.2.1, 4.2.2, 5.0.0, 5.0.1, 5.0.2, 5.1.0, 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.1.0, 7.0.0, 7.1.0, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.3.0, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.1.0, 8.2.0, 8.2.1, 8.2.2, 8.2.3, 8.2.4, 8.2.5, 9.0.0, 9.1.0, 9.2.0, 9.2.1, 9.2.2, 9.2.3, 9.2.4, 10.0.0, 10.1.0, 10.1.1, 10.1.2, 10.1.3, 10.2.0, 10.2.1, 10.3.0, 10.4.0, 10.4.1, 10.4.2, 10.5.0, 10.6.0, 10.6.1, 10.6.2, 10.7.0, 10.8.0, 10.8.1, 10.9.0, 10.10.0, 10.11.0, 10.12.0, 11.0.0, 11.1.0, 11.1.1, 11.1.2, 11.2.0, 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.6.0, 11.7.0, 11.8.0, 12.0.0, 12.1.0, 12.2.0, 12.3.0
pypi:python-ironic-inspector-client
Dependent packages: 6Dependent repositories: 47
Downloads: 20,359 last month
Affected Version Ranges: < 0.2.5
Fixed in: 0.2.5
All affected versions:
All unaffected versions: 1.0.0, 1.0.1, 1.1.0, 1.2.0, 1.3.0, 1.4.0, 1.5.0, 1.6.0, 1.7.0, 1.8.0, 1.9.0, 1.10.0, 1.11.0, 1.12.0, 2.0.0, 2.1.0, 2.1.1, 3.0.0, 3.1.0, 3.1.1, 3.1.2, 3.2.0, 3.3.0, 3.4.0, 3.5.0, 3.6.0, 3.6.1, 3.7.0, 3.7.1, 4.0.0, 4.1.0, 4.2.0, 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.7.1, 4.8.0, 4.9.0, 5.0.0, 5.1.0, 5.2.0