A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's node_cache.find_node(). This function makes a SQL query using unfiltered data from a server reporting inspection results (by a POST to the /v1/continue endpoint). Because the API is unauthenticated, the flaw could be exploited by an attacker with access to the network on which ironic-inspector is listening. Because of how ironic-inspector uses the query results, it is unlikely that data could be obtained. However, the attacker could pass malicious data and create a denial of service.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3
    and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's node_cache.find_node().
    This function makes a SQL query using unfiltered data from a server reporting inspection results (by a
    POST to the /v1/continue endpoint). Because the API is unauthenticated, the flaw could be exploited by an
    attacker with access to the network on which ironic-inspector is listening. Because of how ironic-
    inspector uses the query results, it is unlikely that data could be obtained. However, the attacker could
    pass malicious data and create a denial of service. (CVE-2019-10141)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3     and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's node_cache.find_node().
    This function makes a SQL query using unfiltered data from a server reporting inspection results (by a     POST to the /v1/continue endpoint). Because the API is unauthenticated, the flaw could be exploited by an     attacker with access to the network on which ironic-inspector is listening. Because of how ironic-     inspector uses the query results, it is unlikely that data could be obtained. However, the attacker could     pass malicious data and create a denial of service. (CVE-2019-10141)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:1734 advisory.

    ironic-inspector is an auxiliary service for discovering hardware properties for a node managed by Ironic.
    Hardware introspection or hardware properties discovery is a process of getting hardware parameters     required for scheduling from a bare metal node, given its power management credentials (e.g. IPMI address,     user name and password).

    Security Fix:

    * openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data     (CVE-2019-10141)

    For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other     related information, refer to the CVE page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:1669 advisory.

    Nodes managed by Ironic may use the ironic-inspector auxiliary service to discover hardware properties.
    Hardware introspection or hardware properties discovery is a process of getting hardware parameters     required for scheduling from a bare metal node, given its power management credentials (e.g. IPMI address,     user name and password).

    Security Fix(es):

    * openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data     (CVE-2019-10141)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:1722 advisory.

    OpenStack Bare Metal (ironic) is a tool used to provision bare metal (as opposed to virtual) machines. It     leverages common technologies such as PXE boot and IPMI to cover a wide range of hardware. It also     supports pluggable drivers to allow added, vendor-specific, functionality.

    Security Fix(es):

    * openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data     (CVE-2019-10141)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2505 advisory.

    ironic-inspector is an auxiliary service for discovering hardware     properties for a node managed by Ironic. Hardware introspection or hardware     properties discovery is a process of getting hardware parameters required     for scheduling from a bare metal node, given its power management     credentials (e.g. IPMI address, user name and password).

    Security Fix(es):

    * openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data     (CVE-2019-10141)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
433656	SCA: security update for ironic-inspector (GHSA-c7fc-cm7p-92r2)	Tenable Cloud Security	SCA Checks	high
433656	SCA: security update for ironic-inspector (GHSA-c7fc-cm7p-92r2)	Tenable Self-Hosted Container Security	SCA Checks	high
251750	Linux Distros Unpatched Vulnerability : CVE-2019-10141	Nessus	Misc.	critical
194178	RHEL 7 : openstack-ironic-inspector (RHSA-2019:1734)	Nessus	Red Hat Local Security Checks	critical
194101	RHEL 7 : openstack-ironic-inspector (RHSA-2019:1669)	Nessus	Red Hat Local Security Checks	critical
193994	RHEL 7 : openstack-ironic-inspector (RHSA-2019:1722)	Nessus	Red Hat Local Security Checks	critical
193983	RHEL 7 : openstack-ironic-inspector (RHSA-2019:2505)	Nessus	Red Hat Local Security Checks	critical

Detections

Analytics

CVE-2019-10141

high

Tenable Plugins

high

high

critical

critical

critical

critical

critical