| Package | Affected versions | Patched versions |
|---|---|---|
| sushy-tools | < 0.21.1 | 0.21.1 |
| virtualbmc | < 3.0.0 | 3.0.0 |
| sushy-tools | < 0.21.1 | 0.21.1 |
| virtualbmc | < 3.0.0 | 3.0.0 |
An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an "unsupported, production-like configuration."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free