CVE-2016-4985: OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor
(updated )
The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the v1/drivers/$DRIVER_NAME/vendor_passthru resource.
References
- access.redhat.com/errata/RHSA-2016:1377
- access.redhat.com/errata/RHSA-2016:1378
- access.redhat.com/security/cve/CVE-2016-4985
- bugs.launchpad.net/ironic/+bug/1572796
- bugzilla.redhat.com/show_bug.cgi?id=1346193
- github.com/advisories/GHSA-f7cr-7c2c-fm8r
- github.com/openstack/ironic
- github.com/openstack/ironic/commit/426a306fb580762e97ada04e1253dedd9b64d410
- github.com/openstack/ironic/commit/affec224977174581d19a2b914772cb0409f633e
- github.com/openstack/ironic/commit/f5a3ff1dfcde068769f9a2a477ba6a9edaf69c77
- nvd.nist.gov/vuln/detail/CVE-2016-4985
- review.openstack.org/332195
- review.openstack.org/332196
- review.openstack.org/332197
Code Behaviors & Features
Detect and mitigate CVE-2016-4985 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →