SQL Injection in OpenStack Ironic-Inspector
CVE-2019-10141
A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's node_cache.find_node(). This function makes a SQL query using unfiltered data from a server reporting inspection results (by a POST to the /v1/continue endpoint). Because the API is unauthenticated, the flaw could be exploited by an attacker with access to the network on which ironic-inspector is listening. Because of how ironic-inspector uses the query results, it is unlikely that data could be obtained. However, the attacker could pass malicious data and create a denial of service.
Vulnerability class: SQL Injection
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.3 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H.
EPSS exploit prediction
EPSS: 0.025 (84.0th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 84th percentile — 84.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.025 · newest: 0.025 · change: 0.000
Affected products
- OpenStack Ironic-Inspector
- Red Hat Enterprise Linux — versions 7.0
- Red Hat OpenStack — versions 10, 13, 14
- Red Hat Openstack-Ironic-Inspector — versions all 5.0.x up to, excluding 5.0.2, all 6.0.x up to, excluding 6.0.3, all 7.2.x up to, excluding 7.2.4
Weakness classification (CWE)
References
- docs.openstack.org/releasenotes/ironic-inspector/rocky.html (Release Notes, Vendor Advisory)
- docs.openstack.org/releasenotes/ironic-inspector/stein.html (Release Notes, Vendor Advisory)
- bugzilla.redhat.com/show_bug.cgi (Patch, Third Party Advisory, Issue Tracking)
- docs.openstack.org/releasenotes/ironic-inspector/ocata.html (Release Notes, Vendor Advisory)
- docs.openstack.org/releasenotes/ironic-inspector/pike.html (Release Notes, Vendor Advisory)
- docs.openstack.org/releasenotes/ironic-inspector/queens.html (Release Notes, Vendor Advisory)
- access.redhat.com/errata/RHSA-2019:2505 (vendor-advisory)
Frequently asked questions
- What is CVE-2019-10141?
- CVE-2019-10141 is a high-severity vulnerability in OpenStack Ironic-Inspector, classified under SQL Injection. CVSS score: 8.3/10. Published 2019-07-30.
- How severe is CVE-2019-10141?
- High severity. CVSS v3 base score is 8.3 out of 10.