Oval Definition:oval:org.opensuse.security:def:20164985
Revision Date:2020-11-28Version:1
Title:CVE-2016-4985
Description:

The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the v1/drivers/$DRIVER_NAME/vendor_passthru resource.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2016-4985
SUSE-SU-2016:1966-1
Platform(s):SUSE OpenStack Cloud 6
Product(s):
Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND Package Information
  • openstack-designate-1.0.3~a0~dev10-6 is installed
  • OR openstack-designate-agent-1.0.3~a0~dev10-6 is installed
  • OR openstack-designate-api-1.0.3~a0~dev10-6 is installed
  • OR openstack-designate-central-1.0.3~a0~dev10-6 is installed
  • OR openstack-designate-doc-1.0.3~a0~dev10-6 is installed
  • OR openstack-designate-sink-1.0.3~a0~dev10-6 is installed
  • OR openstack-ironic-4.2.5-6 is installed
  • OR openstack-ironic-api-4.2.5-6 is installed
  • OR openstack-ironic-conductor-4.2.5-6 is installed
  • OR openstack-ironic-doc-4.2.5-6 is installed
  • OR openstack-neutron-vpn-agent-7.0.5~a0~dev3-6 is installed
  • OR openstack-neutron-vpnaas-7.0.5~a0~dev3-6 is installed
  • OR openstack-neutron-vpnaas-doc-7.0.5~a0~dev3-6 is installed
  • OR openstack-nova-docker-0.0.1~a0~dev238-4 is installed
  • OR openstack-sahara-3.0.3~a0~dev1-6 is installed
  • OR openstack-sahara-api-3.0.3~a0~dev1-6 is installed
  • OR openstack-sahara-doc-3.0.3~a0~dev1-6 is installed
  • OR openstack-sahara-engine-3.0.3~a0~dev1-6 is installed
  • OR openstack-tempest-7.0.0-9 is installed
  • OR openstack-tempest-test-7.0.0-9 is installed
  • OR openstack-trove-4.0.1~a0~dev19-8 is installed
  • OR openstack-trove-api-4.0.1~a0~dev19-8 is installed
  • OR openstack-trove-conductor-4.0.1~a0~dev19-8 is installed
  • OR openstack-trove-doc-4.0.1~a0~dev19-8 is installed
  • OR openstack-trove-guestagent-4.0.1~a0~dev19-8 is installed
  • OR openstack-trove-taskmanager-4.0.1~a0~dev19-8 is installed
  • OR python-designate-1.0.3~a0~dev10-6 is installed
  • OR python-ironic-4.2.5-6 is installed
  • OR python-neutron-vpnaas-7.0.5~a0~dev3-6 is installed
  • OR python-sahara-3.0.3~a0~dev1-6 is installed
  • OR python-tempest-7.0.0-9 is installed
  • OR python-trove-4.0.1~a0~dev19-8 is installed
  • BACK