Unscored severity · published Nov 25, 2015
CVE-2015-5306
OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary…
–
CVSS
1.6%
EPSS
No
On KEV
Description
OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
II
Ironic Inspector · Openstack
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-5306
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-5306
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2015-2685.html
Vendor Advisory
https://access.redhat.com/errata/RHSA-2015:1929
Vendor Advisory
https://bugs.launchpad.net/ironic-inspector/+bug/1506419
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1273698
More from Ironic Inspector
9.1
CVE-2019-10141
A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1