Approved changes feed: RSS · Atom

cpe:2.3:a:openshift-metal3:bmctest:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenshift Metal3 (36a5855e-f526-5715-ac83-c55a00ca157d)
ProductBmctest (fe9c7336-6322-592d-862a-7c995601eec9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-71568 vulnerable 2026-10-13 12:28:47.093221 BMCtest exposes Ironic without authentication and TLS during the test
MEDIUM (5.3)
In BMCtest, Ironic is started without authentication and TLS for the duration of the test. Exploiting the problem requires winning the race with bmctest itself, which reduces the attack window and significantly increases its complexity.
Published: 2026-09-17T13:46:16.878Z
Updated: 2026-09-17T19:34:27.498Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.