Metal3-io vulnerabilities
We track 1 vulnerability in Metal3-io products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Metal3-io vulnerabilities
- 7.5 High severity
ironic-image: Missing Authentication for Critical Functionality
ironic-image is a container image to run OpenStack Ironic as part of Metal³. Prior to version capm3-v1.4.3, if Ironic is not deployed with TLS and it does not have API and Conductor split into separate services, access to the API is not protected by any authen