Bmctest
Monthly
BMCtest's test harness starts an Ironic bare-metal provisioning service without authentication or TLS, letting an attacker on the adjacent network modify node and provisioning state through the unauthenticated Ironic API for as long as the test is running. Exploitation is heavily constrained by a timing race: the unprotected Ironic instance exists only during an active bmctest run, and the attacker must reach the API before the harness tears it down, which is why the CVSS vector carries AC:H and the overall score is only 5.3 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N, integrity-only impact). No public exploit identified at time of analysis, and the independent assessment rates this as a genuinely low-priority issue despite the CWE-306 missing-authentication framing.
BMCtest's test harness starts an Ironic bare-metal provisioning service without authentication or TLS, letting an attacker on the adjacent network modify node and provisioning state through the unauthenticated Ironic API for as long as the test is running. Exploitation is heavily constrained by a timing race: the unprotected Ironic instance exists only during an active bmctest run, and the attacker must reach the API before the harness tears it down, which is why the CVSS vector carries AC:H and the overall score is only 5.3 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N, integrity-only impact). No public exploit identified at time of analysis, and the independent assessment rates this as a genuinely low-priority issue despite the CWE-306 missing-authentication framing.