Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-5306HistoryNov 25, 2015 - 8:59 p.m.
CVE-2015-5306
2015-11-2520:59:06
Debian Security Bug Tracker
security-tracker.debian.org
9
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.007
Percentile
79.5%
OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | ironic-inspector | < 3.2.0-1 | ironic-inspector_3.2.0-1_all.deb |
| Debian | 11 | all | ironic-inspector | < 3.2.0-1 | ironic-inspector_3.2.0-1_all.deb |
| Debian | 999 | all | ironic-inspector | < 3.2.0-1 | ironic-inspector_3.2.0-1_all.deb |
| Debian | 13 | all | ironic-inspector | < 3.2.0-1 | ironic-inspector_3.2.0-1_all.deb |
Related
openvas
openvas
Fedora Update for openstack-ironic-discoverd FEDORA-2015-5062
2015-11-13 00:00:00
redhat
redhat
(RHSA-2015:1929) Important: openstack-ironic-discoverd security update
2015-10-22 19:34:24
(RHSA-2015:2685) Important: openstack-ironic-discoverd security update
2015-12-21 19:03:53
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:08:09
osv
osv
Injection vulnerability that affects ironic-discoverd
2019-07-05 21:10:52
PYSEC-2015-28
2015-11-25 20:59:00
nvd
nvd
CVE-2015-5306
2015-11-25 20:59:06
prion
prion
Code injection
2015-11-25 20:59:00
fedora
fedora
[SECURITY] Fedora 22 Update: openstack-ironic-discoverd-1.1.1-1.fc22
2015-11-13 01:55:04
[SECURITY] Fedora 23 Update: openstack-ironic-discoverd-1.1.1-1.fc23
2015-11-12 23:33:21
cvelist
cvelist
CVE-2015-5306
2015-11-25 20:00:00
cve
cve
CVE-2015-5306
2015-11-25 20:59:06
github
github
Injection vulnerability that affects ironic-discoverd
2019-07-05 21:10:52
nessus
nessus
Fedora 23 : openstack-ironic-discoverd-1.1.1-1.fc23 (2015-16ecacb90b)
2016-03-04 00:00:00
Fedora 22 : openstack-ironic-discoverd-1.1.1-1.fc22 (2015-5062ef3dbe)
2016-03-04 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.007
Percentile
79.5%
Related for DEBIANCVE:CVE-2015-5306