CVE-2015-5306 Injection vulnerability that affects ironic-discoverd
Remote attackers can execute arbitrary Python code via the Flask console if debug mode is enabled in OpenStack Ironic Inspector.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-5306?
CVE-2015-5306 is a medium-severity code injection vulnerability in n/a, published on 25 Nov 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error.
Weakness: CWE-254
Which versions are affected by CVE-2015-5306?
6 open source packages ship an affected version, including ironic-inspector and python-ironic-inspector-client. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
ironic-inspector PyPI | All versions | 2.2.2 |
ironic-inspector PyPI | All versions | 2.2.2 |
ironic-inspector PyPI | All versions | 2.3.0 |
python-ironic-inspector-client PyPI | All versions | 0.2.5 |
python-ironic-inspector-client PyPI | All versions | 0.2.5 |
python-ironic-inspector-client PyPI | All versions | 0.2.5 |
Linux distribution packages (4)
openstack-ironic-discoverd Red Hat:openstack-director:7::el7 | All versions | 0:1.1.0-8.el7ost |
openstack-ironic-discoverd-ramdisk Red Hat:openstack-director:7::el7 | All versions | 0:1.1.0-8.el7ost |
python-ironic-discoverd Red Hat:openstack-director:7::el7 | All versions | 0:1.1.0-8.el7ost |
openstack-ironic-discoverd Red Hat:openstack:6::el7 | All versions | 0:0.2.5-2.el7ost |
Products include Openstack Ironic Inspector.
How do I fix CVE-2015-5306?
Upgrade ironic-inspector to a fixed version for your release line: 2.2.2 or 2.3.0.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2015-5306 being exploited?
There is no known exploitation of CVE-2015-5306 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2015-5306, GHSA-x64g-wjmw-w328, PYSEC-2015-28, PYSEC-2026-505, RHSA-2015:1929, RHSA-2015:2685.