11 matches found
CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
UBUNTU-CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
Vulnerability related to OpenStack Ironic software supply chain issues
Versions 18.1.0 through 29.1.1, 30.0.0 through 32.1.1, 33.0.0 through 35.1.1, and 36.0.0 through 39.0.1 of OpenStack Ironic contain a vulnerability related to the software supply chain. This vulnerability arises because the vendorpassthru functionality permits operations on the BMC Redfish servic...
PT-2026-121748
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor passthru, e.g., to delete accounts from the BMC's Redfish service...
Linux Distros Unpatched Vulnerability : CVE-2022-3287
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction,...
PT-2023-24818 · Ami · Ami Spx
Name of the Vulnerable Software and Affected Versions: AMI SPx affected versions not specified Description: The issue is related to a vulnerability in the BMC of AMI SPx, where a user may inject code that could be executed via a Dynamic Redfish Extension interface. This could lead to a loss of...
CVE-2022-3287
When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file...
AMI MegaRAC SP-X BMC Redfish Authentication Bypass - Lenovo Support US
Lenovo Security Advisory: LEN-31072 Potential Impact: Privilege escalation, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: No CVE Summary Description: AMI has released AMI MegaRAC SP-X Baseboard Management Controller BMC security enhancements to address...