medium6.5
CVE-2015-7514
OpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after use, which allows remote authenticated users to obtain sensitive information.
Impact
OpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after use, which allows remote authenticated users to obtain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openstack | Ironic | Versions 4.2.0, 4.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2015/12/03/4
- https://bugzilla.redhat.com/show_bug.cgi?id=1285809
- https://review.openstack.org/#/c/252993
- https://review.openstack.org/#/c/253001
- http://www.openwall.com/lists/oss-security/2015/12/03/4
- https://bugzilla.redhat.com/show_bug.cgi?id=1285809
- https://review.openstack.org/#/c/252993
- https://review.openstack.org/#/c/253001