Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:27:27 +0000 cnvd-2016-04265 https://cve.radiocsirt.org/vuln/cnvd-2016-04265 cnvd-2016-04265 https://cve.radiocsirt.org/vuln/cnvd-2016-04265 EUVD-2026-84858 https://cve.radiocsirt.org/vuln/euvd-2026-84858 EUVD-2026-84858 https://cve.radiocsirt.org/vuln/euvd-2026-84858 fkie_cve-2016-4985 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4985 <p>The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the v1/drivers/$DRIVER_NAME/vendor_passthru resource.</p> <p>The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the v1/drivers/$DRIVER_NAME/vendor_passthru resource.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-4985 GHSA-f7cr-7c2c-fm8r — OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor https://cve.radiocsirt.org/vuln/ghsa-f7cr-7c2c-fm8r <p><strong>Affected:</strong> PyPI: ironic</p> <p>The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the `v1/drivers/$DRIVER_NAME/vendor_passthru` resource.</p> <p><strong>Affected:</strong> PyPI: ironic</p> <p>The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the `v1/drivers/$DRIVER_NAME/vendor_passthru` resource.</p> https://cve.radiocsirt.org/vuln/ghsa-f7cr-7c2c-fm8r gsd-2016-4985 https://cve.radiocsirt.org/vuln/gsd-2016-4985 gsd-2016-4985 https://cve.radiocsirt.org/vuln/gsd-2016-4985 PYSEC-2026-646 — OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor https://cve.radiocsirt.org/vuln/pysec-2026-646 <p><strong>Affected:</strong> PyPI: ironic</p> <p>The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the `v1/drivers/$DRIVER_NAME/vendor_passthru` resource.</p> <p><strong>Affected:</strong> PyPI: ironic</p> <p>The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the `v1/drivers/$DRIVER_NAME/vendor_passthru` resource.</p> https://cve.radiocsirt.org/vuln/pysec-2026-646 RHSA-2016:1377 — Red Hat Security Advisory: openstack-ironic security update https://cve.radiocsirt.org/vuln/rhsa-2016:1377 <p>openstack-ironic: Ironic Node information including credentials exposed to unauthenticated users</p> <p>openstack-ironic: Ironic Node information including credentials exposed to unauthenticated users</p> https://cve.radiocsirt.org/vuln/rhsa-2016:1377 UBUNTU-CVE-2016-4985 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-4985 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ironic</p> <p>The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the v1/drivers/$DRIVER_NAME/vendor_passthru resource.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ironic</p> <p>The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the v1/drivers/$DRIVER_NAME/vendor_passthru resource.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-4985