Lucene search

K
redhatRedHatRHSA-2019:2505
HistoryAug 15, 2019 - 2:01 p.m.

(RHSA-2019:2505) Important: openstack-ironic-inspector security update

2019-08-1514:01:13
access.redhat.com
38

0.005 Low

EPSS

Percentile

76.1%

ironic-inspector is an auxiliary service for discovering hardware
properties for a node managed by Ironic. Hardware introspection or hardware
properties discovery is a process of getting hardware parameters required
for scheduling from a bare metal node, given its power management
credentials (e.g. IPMI address, user name and password).

Security Fix(es):

  • openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data (CVE-2019-10141)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.