| Package | Affected versions | Patched versions |
|---|---|---|
| ironic | ≥ 17.0.0, < 26.1.7≥ 27.0.0, < 29.0.6≥ 30.0.0, < 32.0.2≥ 33.0.0, < 35.0.2 | 26.1.729.0.632.0.235.0.2 |
OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free