Lucene search

K
redhatRedHatRHSA-2019:1734
HistoryJul 10, 2019 - 12:07 p.m.

(RHSA-2019:1734) Important: openstack-ironic-inspector security update

2019-07-1012:07:25
access.redhat.com
8

0.005 Low

EPSS

Percentile

76.1%

ironic-inspector is an auxiliary service for discovering hardware properties for a node managed by Ironic. Hardware introspection or hardware properties discovery is a process of getting hardware parameters required for scheduling from a bare metal node, given its power management credentials (e.g. IPMI address, user name and password).

Security Fix:

  • openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data (CVE-2019-10141)

For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.