OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1929 advisory.

    Ironic provides bare metal provisioning for OpenStack nodes.

    It was discovered that enabling debug mode in openstack-ironic-discoverd     also enables debug mode in the underlying Flask framework. If errors are     encountered while Flask is in debug mode, a user experiencing an error may     be able to access the debug console (effectively, a command shell).
    (CVE-2015-5306)

    All openstack-ironic-discoverd users are advised to upgrade to these     updated packages, which correct this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might
    allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an
    error. (CVE-2015-5306)

Release 1.1.1, security fix for CVE-2015-5306

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
234400	RHEL 7 : openstack-ironic-discoverd (RHSA-2015:1929)	Nessus	Red Hat Local Security Checks	Local	critical
422118	SCA: security update for ironic-inspector, python-ironic-inspector-client (GHSA-x64g-wjmw-w328)	Tenable Cloud Security	SCA Checks	Local	critical
422118	SCA: security update for ironic-inspector, python-ironic-inspector-client (GHSA-x64g-wjmw-w328)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical
89240	Fedora 22 : openstack-ironic-discoverd-1.1.1-1.fc22 (2015-5062ef3dbe)	Nessus	Fedora Local Security Checks	Local	medium
89156	Fedora 23 : openstack-ironic-discoverd-1.1.1-1.fc23 (2015-16ecacb90b)	Nessus	Fedora Local Security Checks	Local	medium

Detections

Analytics

CVE-2015-5306

critical

Tenable Plugins

critical

critical

critical

medium

medium