1 matches found
GHSA-J4CW-MCG2-2Q78 OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties
In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information such as iSCSI credentials. The PATCH outcome is a security issue; the POST outcome is not a security issue...
6.8CVSS5.3AI score0.00291EPSS
SaveExploits0References7
20