Description (CNA)
In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OpenStack / Ironic | affected 1.0.0 through 29.0.6; affected 30.0.0 through 32.0.1; affected 33.0.0 through 35.0.1; affected 36.0.0 through 38.0.0 |
CWE
CWE-863
References
ADP enrichment
No English description supplied.
No English description supplied.