Aller au contenu
en Se connecter
5.0 Moyenne

CVE-2026-71201 In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups…

Description

In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project.

Produits et versions touchés

Produit Versions touchées Corrigé en
Ironic 36.0 36.0.0 → 38.0.0 Pas de correctif indiqué
Ironic 33.0 33.0.0 → 35.0.1 Pas de correctif indiqué
Ironic 30.0 30.0.0 → 32.0.1 Pas de correctif indiqué
Ironic 1.0 1.0.0 → 29.0.6 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Ironic

Les 18 CVE de Ironic →
CVE-2026-90458 OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's… 5.4 Moyenne CVE-2026-89419 OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to… 5.0 Moyenne CVE-2026-115638 OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of… 4.3 Moyenne CVE-2026-90461 OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is… 6.3 Moyenne
Suivre cette CVE