Lucene search
+L

1 matches found

Veracode
Veracode
added 2023/05/08 1:20 p.m.23 views

Improper Authorization

github.com/metal3-io/baremetal-operator is vulnerable to Improper Authorization. The .htpasswd files that Ironic and Ironic-inspector store as ConfigMaps rather than secrets when they are installed within Baremetal Operator using the deploy.sh file that is supplied. Anyone with access to the...

6CVSS5.4AI score0.00191EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder