CVE-2019-10141: SQL Injection
A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode(). This function makes a SQL query using unfiltered data from a server reporting inspection results (by a POST to the /v1/continue endpoint). Because the API is unauthenticated, the flaw could be exploited by an attacker with access to the network on which ironic-inspector is listening. Because of how ironic-inspector uses the query results, it is unlikely that data could be obtained. However, the attacker could pass malicious data and create a denial of service.
Other sources
There is an SQL-injection vulnerability in the inpector's nodecache.findnode(). This function makes an SQL query using unescaped data received on the wire from a server reporting inspection results (specifically, via a POST to the /v1/continue endpoint).
The unescaped data should not be trusted - the API is unauthenticated and it's likely that anything with access to the network on which ironic-inspector is listening could exploit the vulnerability.
Because of how the results of the query are used, there appears to be no way to exploit this vulnerability to exfiltrate data. It could be exploited for destructive ends by passing malicious data (e.g. "\'; DROP DATABASE;\'").
Every release from RHOS 8 on is affected.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2019-10141.
What is the severity of CVE-2019-10141?
The severity of CVE-2019-10141 is critical with a CVSS score of 9.1.
What is the affected software for CVE-2019-10141?
The affected software for CVE-2019-10141 is openstack-ironic-inspector, versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3, and 8.2.1.
What is the fix/remedy for CVE-2019-10141?
The fix/remedy for CVE-2019-10141 is to update openstack-ironic-inspector to versions 5.0.2, 6.0.3, 7.2.4, 8.0.3, or 8.2.1.
Where can I find more information about CVE-2019-10141?
You can find more information about CVE-2019-10141 at the following references: [link1], [link2], [link3].