Lucene search
HistoryNov 25, 2015 - 8:59 p.m.
CVE-2015-5306
cve-2015-5306
openstack
ironic inspector
remote attackers
python code
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.6%
OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error.
Affected configurations
Node
openstackironic_inspector
| CPE | Name | Operator | Version |
|---|---|---|---|
| openstack:ironic_inspector | openstack ironic inspector | eq | * |
Related
osv
osv
Injection vulnerability that affects ironic-discoverd
2019-07-05 21:10:52
PYSEC-2015-28
2015-11-25 20:59:00
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:08:09
nvd
nvd
CVE-2015-5306
2015-11-25 20:59:06
redhat
redhat
(RHSA-2015:1929) Important: openstack-ironic-discoverd security update
2015-10-22 19:34:24
(RHSA-2015:2685) Important: openstack-ironic-discoverd security update
2015-12-21 19:03:53
openvas
openvas
Fedora Update for openstack-ironic-discoverd FEDORA-2015-5062
2015-11-13 00:00:00
debiancve
debiancve
CVE-2015-5306
2015-11-25 20:59:06
fedora
fedora
[SECURITY] Fedora 22 Update: openstack-ironic-discoverd-1.1.1-1.fc22
2015-11-13 01:55:04
[SECURITY] Fedora 23 Update: openstack-ironic-discoverd-1.1.1-1.fc23
2015-11-12 23:33:21
prion
prion
Code injection
2015-11-25 20:59:00
cvelist
cvelist
CVE-2015-5306
2015-11-25 20:00:00
github
github
Injection vulnerability that affects ironic-discoverd
2019-07-05 21:10:52
nessus
nessus
Fedora 22 : openstack-ironic-discoverd-1.1.1-1.fc22 (2015-5062ef3dbe)
2016-03-04 00:00:00
Fedora 23 : openstack-ironic-discoverd-1.1.1-1.fc23 (2015-16ecacb90b)
2016-03-04 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.6%
Related for CVE-2015-5306