A project manager in Ironic can inject arbitrary commands executed by the conductor during IPMI console activation in specific console backends. Vulnerable configurations require explicit enabling of 'ipmitool-shellinabox' or 'ipmitool-socat' interfaces.
| Vendor | Product | Versions |
|---|---|---|
| openstack | ironic | >=4.3.0 <26.1.6, >=27.0.0 <29.0.5, >=30.0.0 <32.0.1, >=33.0.0 <35.0.1 |
