Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-5306
HistoryNov 25, 2015 - 8:59 p.m.

CVE-2015-5306

2015-11-2520:59:06
CWE-254
[email protected]
web.nvd.nist.gov
3

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.007

Percentile

79.5%

JSON

OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error.

Affected configurations

Nvd
Node
openstackironic_inspector
VendorProductVersionCPE
openstackironic_inspector*cpe:2.3:a:openstack:ironic_inspector:*:*:*:*:*:*:*:*

Related

debiancve 1
openvas 1
redhat 2
veracode 1
osv 2
prion 1
fedora 2
cvelist 1
cve 1
github 1
nessus 2
debiancve
debiancve
CVE-2015-5306
2015-11-25 20:59:06
openvas
openvas
Fedora Update for openstack-ironic-discoverd FEDORA-2015-5062
2015-11-13 00:00:00
redhat
redhat
(RHSA-2015:1929) Important: openstack-ironic-discoverd security update
2015-10-22 19:34:24
(RHSA-2015:2685) Important: openstack-ironic-discoverd security update
2015-12-21 19:03:53
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:08:09
osv
osv
Injection vulnerability that affects ironic-discoverd
2019-07-05 21:10:52
PYSEC-2015-28
2015-11-25 20:59:00
prion
prion
Code injection
2015-11-25 20:59:00
fedora
fedora
[SECURITY] Fedora 22 Update: openstack-ironic-discoverd-1.1.1-1.fc22
2015-11-13 01:55:04
[SECURITY] Fedora 23 Update: openstack-ironic-discoverd-1.1.1-1.fc23
2015-11-12 23:33:21
cvelist
cvelist
CVE-2015-5306
2015-11-25 20:00:00
cve
cve
CVE-2015-5306
2015-11-25 20:59:06
github
github
Injection vulnerability that affects ironic-discoverd
2019-07-05 21:10:52
nessus
nessus
Fedora 23 : openstack-ironic-discoverd-1.1.1-1.fc23 (2015-16ecacb90b)
2016-03-04 00:00:00
Fedora 22 : openstack-ironic-discoverd-1.1.1-1.fc22 (2015-5062ef3dbe)
2016-03-04 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.007

Percentile

79.5%

JSON
Related for NVD:CVE-2015-5306
debiancve1openvas1redhat2veracode1osv2prion1fedora2cvelist1cve1github1nessus2