587 matches found
openstack-ironic: Prevent rehoming resources to nodes with different owner
A flaw was found in OpenStack Ironic. An authenticated project manager can change the node associated with Volume Connectors or Volume Target objects, potentially changing the project permitted to access the object. Volume Connectors contain secrets in environments configuring boot from volume wi...
UBUNTU-CVE-2026-115638
OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb...
DEBIAN-CVE-2026-89419
OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/ident - in other words, not using the specific maintenance endpoint...
DEBIAN-CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
CVE-2026-89419
OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/ident - in other words, not using the specific maintenance endpoint...
CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
DEBIAN-CVE-2026-115638
OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb...
CVE-2026-115638
OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb...
CVE-2026-115638
OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb...
CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
EUVD-2026-108574
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
CVE-2026-90458
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...
CVE-2026-90458
OpenStack Ironic versions prior to 39.0.1 are vulnerable to a path traversal vulnerability within the Redfish vendor passthrough subscription management. An authenticated attacker with vendor passthrough privileges can use a crafted subscription id to perform GET or DELETE operations on arbitrary...
EUVD-2026-108571
OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/ident - in other words, not using the specific maintenance endpoint...
CVE-2026-89419
OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/ident - in other words, not using the specific maintenance endpoint...
CVE-2026-89419
OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/ident - in other words, not using the specific maintenance endpoint...
CVE-2026-89419
OpenStack Ironic versions before 39.0.1 are vulnerable to a missing authorization check in the node PATCH API . An authenticated lessee member can bypass the stricter set_maintenance policy by sending a PATCH request to /v1/nodes/{ident} with a maintenance field. Because the request is processed ...