openstack-ironic: Ironic Node information including credentials exposed to unauthenticated users
Published Jul 12, 2016
7.5
HIGHCVSS 3.0
EPSS 2.86%
Description
The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the v1/drivers/$DRIVER_NAME/vendor_passthru resource.
Affected products
No data.
Configuration 2
- ≤ 4.2.4
- 5.1.0
- 5.1.1
No data.
Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
openstack-ironic-0:2015.1.2-4.el7ost
Fixed · RHSA-2016:1377
Red Hat OpenStack Platform 8.0 (Liberty)
openstack-ironic-1:4.2.5-1.el7ost
Fixed · RHSA-2016:1378
Red Hat Enterprise Linux OpenStack Platform 6 (Juno)
openstack-ironic
Will not fix
Red Hat OpenStack Platform 10 (Newton)
openstack-ironic
Not affected
Red Hat OpenStack Platform 9 (Mitaka)
openstack-ironic
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 | openstack-ironic-0:2015.1.2-4.el7ost | Fixed | RHSA-2016:1377 |
| Red Hat OpenStack Platform 8.0 (Liberty) | openstack-ironic-1:4.2.5-1.el7ost | Fixed | RHSA-2016:1378 |
| Red Hat Enterprise Linux OpenStack Platform 6 (Juno) | openstack-ironic | Will not fix | n/a |
| Red Hat OpenStack Platform 10 (Newton) | openstack-ironic | Not affected | n/a |
| Red Hat OpenStack Platform 9 (Mitaka) | openstack-ironic | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1 other source (Red Hat) ▾
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AV:N/AC:L/Au:N/C:P/I:N/A:N
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (13 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 2.86% (0.02860) | 86.26th | v5 (v2026.06.15) |
| Jun 15, 2026 | 2.84% (0.02836) | 84.76th | v5 (v2026.06.15) |
| Mar 30, 2025 | 0.79% (0.00786) | 71.56th | v4 (v2025.03.14) |
| Mar 29, 2025 | 1.99% (0.01992) | 72.78th | v4 (v2025.03.14) |
| Mar 17, 2025 | 0.65% (0.00654) | 69.22th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.58% (0.00584) | 78.87th | v3 (v2023.03.01) |
| Feb 8, 2024 | 0.58% (0.00584) | 77.47th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.58% (0.00584) | 74.82th | v3 (v2023.03.01) |
| Mar 6, 2023 | 1.32% (0.01319) | 71.27th | v2 (v2022.01.01) |
| Feb 13, 2023 | 1.32% (0.01319) | 70.74th | v2 (v2022.01.01) |
| Feb 3, 2023 | 1.54% (0.01537) | 73.85th | v2 (v2022.01.01) |
| Apr 1, 2022 | 1.32% (0.01319) | 69.22th | v2 (v2022.01.01) |
| Feb 4, 2022 | 1.32% (0.01319) | 44.98th | v2 (v2022.01.01) |
References (15)
- http://www.openwall.com/lists/oss-security/2016/06/21/6 mailing-listx_refsource_MLIST
- https://access.redhat.com/errata/RHSA-2016:1377 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2016:1378 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2016-4985 Vendor Advisory
- https://bugs.launchpad.net/ironic/+bug/1572796 x_refsource_CONFIRMVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1346193 Issue Tracking
- https://github.com/advisories/GHSA-f7cr-7c2c-fm8r Advisory
- https://github.com/openstack/ironic/commit/426a306fb580762e97ada04e1253dedd9b64d410
- https://github.com/openstack/ironic/commit/affec224977174581d19a2b914772cb0409f633e
- https://github.com/openstack/ironic/commit/f5a3ff1dfcde068769f9a2a477ba6a9edaf69c77
- https://nvd.nist.gov/vuln/detail/CVE-2016-4985
- https://review.openstack.org/332195 x_refsource_CONFIRM
- https://review.openstack.org/332196 x_refsource_CONFIRM
- https://review.openstack.org/332197 x_refsource_CONFIRM
- https://www.cve.org/CVERecord?id=CVE-2016-4985
Change history (0)
No recorded changes yet.