DEBIAN-CVE-2026-42997

An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token which provides access to all OpenStack services Ironic is authorized for; o...

CVE-2026-42997

creationtimestamp| type| source ---|---|--- 2026-05-05 17:59:08+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml4ratvmfr2j 2026-05-05 19:17:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4vnfpglw2w 2026-05-05 20:35:31+00:00| seen|...

CVE-2026-42997

An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token which provides access to all OpenStack services Ironic is authorized for; o...