Vulnerabilities in metal3-io
6 resultsCVE-2024-43803MEDIUMBMO can expose particularly named secrets from other namespaces via BMH CRDEPSS 0.6%CVE-2023-40585HIGHUnauthenticated access to Ironic APIEPSS 0.4%CVE-2026-47190MEDIUMIPAM controller service account granted unnecessary full access to SecretsEPSS 0.3%CVE-2024-31463MEDIUMIronic-image allows unauthenticated local access to Ironic APIEPSS 0.2%CVE-2023-30841MEDIUMIronic and ironic-inspector deployed within Baremetal Operator may expose as ConfigMapsEPSS 0.2%CVE-2025-29781MEDIUMBare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRDEPSS 0.2%