Ironic Python Agent vulnerabilities
2 known vulnerabilities in Ironic Python Agent from OpenStack. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest first
- 7.2 High severity
Ironic Python Agent: Improper Neutralization of Special Elements used in an OS Command
In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntp_server is passed to a shell
- 7.5 High severity
ironic-python-agent: Inclusion of Functionality from Untrusted Control Sphere
An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.