OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1929 advisory.

    Ironic provides bare metal provisioning for OpenStack nodes.

    It was discovered that enabling debug mode in openstack-ironic-discoverd     also enables debug mode in the underlying Flask framework. If errors are     encountered while Flask is in debug mode, a user experiencing an error may     be able to access the debug console (effectively, a command shell).
    (CVE-2015-5306)

    All openstack-ironic-discoverd users are advised to upgrade to these     updated packages, which correct this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Release 1.1.1, security fix for CVE-2015-5306

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
234400	RHEL 7 : openstack-ironic-discoverd (RHSA-2015:1929)	Nessus	Red Hat Local Security Checks	critical
89240	Fedora 22 : openstack-ironic-discoverd-1.1.1-1.fc22 (2015-5062ef3dbe)	Nessus	Fedora Local Security Checks	medium
89156	Fedora 23 : openstack-ironic-discoverd-1.1.1-1.fc23 (2015-16ecacb90b)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2015-5306

critical

Tenable Plugins

critical

medium

medium