← Vulnerability feed

Vulnerability record · CVE-2019-10141 · published 30 July 2019

CVE-2019-10141: Openstack ironic-inspector sql injection vulnerability

Openstack · Ironic Inspector

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's node_cache.find_node(). This function makes a SQL query using unfiltered data from a server reporting inspection results (by a POST to the /v1/continue endpoint). Because the API is unauthenticated, the flaw could be exploited by an attacker with access to the network on which ironic-inspector is listening. Because of how ironic-inspector uses the query results, it is unlikely that data could be obtained. However, the attacker could pass malicious data and create a denial of service.

9.1 CVSS 3.0 Critical EPSS 2.5% · top 15.9% CWE-89 · SQL injection
9.1CVSS 3.0 base score, v2 6.4
2.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
14References
17 Jun 2026Last modified by NVD

Description

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's node_cache.find_node(). This function makes a SQL query using unfiltered data from a server reporting inspection results (by a POST to the /v1/continue endpoint). Because the API is unauthenticated, the flaw could be exploited by an attacker with access to the network on which ironic-inspector is listening. Because of how ironic-inspector uses the query results, it is unlikely that data could be obtained. However, the attacker could pass malicious data and create a denial of service.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://access.redhat.com/errata/RHSA-2019:2505
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10141 Issue TrackingPatchThird Party Advisory
https://docs.openstack.org/releasenotes/ironic-inspector/ocata.html#relnotes-5-0-2-7-origin-stable-ocata Release NotesVendor Advisory
https://docs.openstack.org/releasenotes/ironic-inspector/pike.html#relnotes-6-0-3-4-stable-pike Release NotesVendor Advisory
https://docs.openstack.org/releasenotes/ironic-inspector/queens.html#relnotes-7-2-4-stable-queens Release NotesVendor Advisory
https://docs.openstack.org/releasenotes/ironic-inspector/rocky.html#relnotes-8-0-3-stable-rocky Release NotesVendor Advisory
https://docs.openstack.org/releasenotes/ironic-inspector/stein.html#relnotes-8-2-1-stable-stein Release NotesVendor Advisory
https://access.redhat.com/errata/RHSA-2019:2505
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10141 Issue TrackingPatchThird Party Advisory
https://docs.openstack.org/releasenotes/ironic-inspector/ocata.html#relnotes-5-0-2-7-origin-stable-ocata Release NotesVendor Advisory
https://docs.openstack.org/releasenotes/ironic-inspector/pike.html#relnotes-6-0-3-4-stable-pike Release NotesVendor Advisory
https://docs.openstack.org/releasenotes/ironic-inspector/queens.html#relnotes-7-2-4-stable-queens Release NotesVendor Advisory
https://docs.openstack.org/releasenotes/ironic-inspector/rocky.html#relnotes-8-0-3-stable-rocky Release NotesVendor Advisory
https://docs.openstack.org/releasenotes/ironic-inspector/stein.html#relnotes-8-2-1-stable-stein Release NotesVendor Advisory

Track CVE-2019-10141 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2017-2637Redhat openstack missing authentication for critical function vulnerabilityA design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-migration. Libvirtd is deployed…EPSS 4.6%10.0CVE-2015-1842Redhat openstack vulnerabilityThe puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, whic…EPSS 5.2%9.9CVE-2016-9603Qemu heap-based buffer overflow vulnerabilityA heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a V…EPSS 4.4%9.9CVE-2017-2620Qemu out-of-bounds write vulnerabilityQuick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could…EPSS 3.6%9.8CVE-2015-5741Golang go http request smuggling vulnerabilityThe net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP r…EPSS 2.7%9.8CVE-2013-2166Openstack python-keystoneclient inadequate encryption strength vulnerabilitypython-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypassEPSS 2.1%9.8CVE-2013-2167Openstack python-keystoneclient insufficient verification of data authenticity vulnerabilitypython-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypassEPSS 2.0%9.8CVE-2018-17963Qemu integer overflow vulnerabilityqemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possib…EPSS 4.7%

Source: NIST National Vulnerability Database (record CVE-2019-10141), CISA KEV, FIRST EPSS (scores of 2026-10-03). This page is refreshed as NVD updates the record.