Threats tagged 'ghsa-54w4-233h-x86g'

OpenStack Ironic's ironic-python-agent before version 35.0.1 contains a vulnerability where during import, a user invoking molds can request authorization to be sent to a remote endpoint. This results in forwarding a time-limited Keystone token or basic credentials, potentially exposing access to all OpenStack services authorized for Ironic. Fixed versions include 26.1.6, 29.0.5, 32.0.1, and 35.0.1.