Executive brief
OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor
Affected products
- PyPI ironic
Junglewise Threat Intelligence
CVE-2016-4985: PYSEC-2026-646 - OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor
CVE-2016-4985 · Severity: low · CVSS 3 · Published 2026-07-02
Technologies: ironic (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1468 - OpenStack Ironic fails to verify checksums of supplied image_source URLs
- OpenStack Ironic sensitive information disclosure in volume target PATCH response
- OpenStack Ironic denial of service via crafted JSON in API endpoints
- OpenStack Ironic directory traversal in ISO image extraction
- OpenStack Ironic boot script injection via unsanitized kernel parameters