SQL Injection Vulnerability in Ironic Inspector Package
Summary
DEBIAN-CVE-2019-10141: A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. Affects ironic-inspector versions < 8.0.0-3. Fixed in 8.0.0-3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ironic Inspector is a component of the OpenStack project, designed to facilitate the inspection of hardware nodes in a cloud environment. It allows users to gather information about the hardware and prepare it for deployment in a cloud infrastructure. The package is crucial for managing bare metal resources and ensuring that they are properly configured and ready for use. However, it has been found to be vulnerable to a SQL injection attack, which could potentially allow unauthorized access to sensitive data or lead to denial of service.
Vulnerability Detail
A SQL injection vulnerability exists in the node_cache.find_node() function of the openstack-ironic-inspector package. This function executes a SQL query using unfiltered data received from a server reporting inspection results via a POST request to the /v1/continue endpoint. The vulnerability arises because the API is unauthenticated, allowing an attacker on the same network to exploit this flaw. Although it is unlikely that sensitive data could be extracted, an attacker could send malicious data, potentially causing a denial of service.
How To Fix
Minimum fixed version
8.0.0-3
This is the first release that contains the fix.
sudo apt-get install --only-upgrade ironic-inspectorTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, consider implementing network security controls to restrict access to the Ironic Inspector API, ensuring that only trusted users can send requests to the service.
Conclusion
The SQL injection vulnerability in the Ironic Inspector package poses a significant risk, particularly due to its unauthenticated API. It is crucial for users to update to the patched version to mitigate potential threats. Implementing network security measures can also help protect against exploitation.
See every vulnerability recorded for ironic-inspector →
FAQ
The vulnerability is a SQL injection flaw that allows attackers to manipulate SQL queries through unfiltered input.
An attacker can exploit this vulnerability by sending specially crafted requests to the Ironic Inspector API, potentially leading to denial of service.
All versions of Ironic Inspector prior to 8.0.0-3 are affected by this vulnerability.
Yes, the vulnerability has been fixed in version 8.0.0-3 and later.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
References
Related vulnerabilities
Recent vulnerabilities recorded for ironic-inspector.
