ironic@34.0.0
OpenStack Bare Metal Provisioning
latest version
36.0.0
latest non vulnerable version
first published
7 years ago
latest version published
16 days ago
licenses detected
- [0,)
Direct Vulnerabilities
Known vulnerabilities in the ironic package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
ironic is an OpenStack Bare Metal Provisioning Affected versions of this package are vulnerable to Incorrect Resource Transfer Between Spheres in the import process when a user invokes molds and requests authorization to be sent to a remote endpoint. The credential forwarded is a time-limited token or basic credentials configured for molds storage. An attacker can gain unauthorized access to resources by leveraging the forwarding of these credentials to a remote endpoint. How to fix Incorrect Resource Transfer Between Spheres? Upgrade | [,26.1.6)[27.0.0,29.0.5)[30.0.0,32.0.1)[33.0.0,35.0.1) |
ironic is an OpenStack Bare Metal Provisioning Affected versions of this package are vulnerable to Unsafe Dependency Resolution in the How to fix Unsafe Dependency Resolution? Upgrade | [,26.1.6)[27.0.0,29.0.5)[30.0.0,32.0.1)[33.0.0,35.0.1) |