Red Hat Bugzilla – Bug 1285809
CVE-2015-7514 openstack-ironic: Ironic does not honor clean steps
Last modified: 2016-11-08 11:14:54 EST
A flaw was reported in Ironic:
Brad Morgan from Rackspace reported a vulnerability in Ironic. To prevent user data leak, Ironic is expected to "clean" a server after use, however that is transparently not happening. Previous tenant's data may be left behind on the disk and may be available to new users. All Ironic setups are affected.
This flaw is reported to affect versions >= 4.2.0 and <= 4.2.1.
Red Hat would like to thank the OpenStack project for reporting this issue. Upstream acknowledges Brad Morgan from Rackspace as the original reporter.
Created attachment 1099283 [details]
Created attachment 1099284 [details]