Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
First Last Prev Next    This bug is not in your last search results.
Bug 1273698 - (CVE-2015-5306) CVE-2015-5306 openstack-ironic-discoverd: potential remote code execution with debug mode enabled
CVE-2015-5306 openstack-ironic-discoverd: potential remote code execution wit...
Status: CLOSED ERRATA
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
high Severity high
: ---
: ---
Assigned To: Red Hat Product Security
impact=important,public=20151015,repo...
: Reopened, Security
Depends On: 1272931 1273701 1288252
Blocks: 1273195
  Show dependency tree / graph
 
Reported: 2015-10-21 01:04 EDT by Garth Mollett
Modified: 2016-04-26 17:46 EDT (History)
21 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
It was discovered that enabling debug mode in openstack-ironic-discoverd also enabled debug mode in the underlying Flask framework. If errors were encountered while Flask was in debug mode, a user experiencing an error might be able to access the debug console (effectively, a command shell).
Story Points: ---
Clone Of:
Environment:
Last Closed: 2016-01-04 00:18:15 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2015:1929 normal SHIPPED_LIVE Important: openstack-ironic-discoverd security update 2015-10-22 19:44:50 EDT
Red Hat Product Errata RHSA-2015:2685 normal SHIPPED_LIVE Important: openstack-ironic-discoverd security update 2015-12-21 19:09:02 EST

  None (edit)
Description Garth Mollett 2015-10-21 01:04:42 EDT 
It was discovered that enabling debug mode in ironic-discoverd would also enable debug mode in flask, which would in turn enable the flask console on error. An attacker able to trigger an error and expose the flask console could use the console to run arbitary python code.
Comment 1 Garth Mollett 2015-10-21 01:17:56 EDT 
Created openstack-ironic-discoverd tracking bugs for this issue:

Affects: fedora-all [bug 1273701]
Comment 3 errata-xmlrpc 2015-10-22 15:45:04 EDT 
This issue has been addressed in the following products:

  OpenStack 7.0 Director/Manager for RHEL 7

Via RHSA-2015:1929 https://access.redhat.com/errata/RHSA-2015:1929
Comment 4 Fedora Update System 2015-11-12 18:29:43 EST 
openstack-ironic-discoverd-1.1.1-1.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report.
Comment 5 Fedora Update System 2015-11-12 20:53:13 EST 
openstack-ironic-discoverd-1.1.1-1.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.
Comment 8 errata-xmlrpc 2015-12-21 14:09:23 EST 
This issue has been addressed in the following products:

  OpenStack 6 for RHEL 7

Via RHSA-2015:2685 https://rhn.redhat.com/errata/RHSA-2015-2685.html
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.