CVSS 3.0
7.5 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2016-4985
High (7.5). EPSS 2.9% chance of exploitation in the next 30 days. Fixed in ironic 4.2.5, 5.1.2.
The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the v1/drivers/$DRIVER_NAME/vendor_passthru resource.
Severity
- EPSS
- 2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:openstack_ironic
- redhat:openstack
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-f7cr-7c2c-fm8r | PyPI | ironic | <4.2.5 | 4.2.5 |
| GHSA-f7cr-7c2c-fm8r | PyPI | ironic | >=5.0 <5.1.2 | 5.1.2 |
| PYSEC-2026-646 | PyPI | ironic | <4.2.5 >=5.0 <5.1.2 | 4.2.5, 5.1.2 |