CVE-2019-10141

Published Jul 30, 2019

Last updated 3 years ago

CVSS critical 9.1

Overview

Description: A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's node_cache.find_node(). This function makes a SQL query using unfiltered data from a server reporting inspection results (by a POST to the /v1/continue endpoint). Because the API is unauthenticated, the flaw could be exploited by an attacker with access to the network on which ironic-inspector is listening. Because of how ironic-inspector uses the query results, it is unlikely that data could be obtained. However, the attacker could pass malicious data and create a denial of service.
Source: secalert@redhat.com
NVD status: Modified

Risk scores

CVSS 3.0

Type: Primary
Base score: 9.1
Impact score: 5.2
Exploitability score: 3.9
Vector string: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Severity: CRITICAL

CVSS 2.0

Type: Primary
Base score: 6.4
Impact score: 4.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-89
secalert@redhat.com: CWE-89

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:openstack:ironic-inspector:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1148EC36-0766-4080-AC70-7C384D8A41BC",
            "versionEndExcluding": "5.0.2"
          },
          {
            "criteria": "cpe:2.3:a:openstack:ironic-inspector:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E8F90AF2-9A18-40F8-BBAF-51D1727142FE",
            "versionEndExcluding": "6.0.3",
            "versionStartIncluding": "5.1.0"
          },
          {
            "criteria": "cpe:2.3:a:openstack:ironic-inspector:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "77B95F6A-6F21-433A-B8C3-D7EA91312E62",
            "versionEndExcluding": "7.2.4",
            "versionStartIncluding": "6.1.0"
          },
          {
            "criteria": "cpe:2.3:a:openstack:ironic-inspector:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E9C414C8-F67E-4C60-BCC7-6CE2C0B552C8",
            "versionEndExcluding": "8.0.3",
            "versionStartIncluding": "8.0.0"
          },
          {
            "criteria": "cpe:2.3:a:openstack:ironic-inspector:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "79F2C939-0CC0-444A-A313-A52A14CA7B0E",
            "versionEndExcluding": "8.2.1",
            "versionStartIncluding": "8.1.0"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA"
          },
          {
            "criteria": "cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "704CFA1A-953E-4105-BFBE-406034B83DED"
          },
          {
            "criteria": "cpe:2.3:a:redhat:openstack:14:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EB7F358B-5E56-41AB-BB8A-23D3CB7A248B"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F40C26BE-56CB-4022-A1D8-3CA0A8F87F4B"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Risk scores

CVSS 3.0

CVSS 2.0

Weaknesses

Social media

Configurations

References