CVE-2026-71568 - Vulnerability Details - OpenCVE

In BMCtest, Ironic is started without authentication and TLS for the duration of the test. Exploiting the problem requires winning the race with bmctest itself, which reduces the attack window and significantly increases its complexity.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Openshift-metal3	Bmctest

No data.

No data.

References

Link	Providers
https://github.com/openshift-metal3/bmctest/security/advisories/GHSA-53vv-qh77-2hqh

History

Fri, 18 Sep 2026 21:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Openshift-metal3 Openshift-metal3 bmctest
Vendors & Products		Openshift-metal3 Openshift-metal3 bmctest

Fri, 18 Sep 2026 14:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 17 Sep 2026 14:00:00 +0000

Type	Values Removed	Values Added
Description		In BMCtest, Ironic is started without authentication and TLS for the duration of the test. Exploiting the problem requires winning the race with bmctest itself, which reduces the attack window and significantly increases its complexity.
Title		BMCtest exposes Ironic without authentication and TLS during the test
Weaknesses		CWE-306
References		https://github.com/openshift-metal3/bmctest/security/advisories/GHSA-53vv-qh77-2hqh
Metrics		cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'}`

MITRE

Status: PUBLISHED

Assigner: redhat-cnalr

Published: 2026-09-17T13:46:16.878Z

Updated: 2026-09-17T19:34:27.498Z

Reserved: 2026-08-07T12:08:03.283Z

Link: CVE-2026-71568

Vulnrichment

Updated: 2026-09-17T19:34:22.933Z

NVD

Status : Awaiting Analysis

Published: 2026-09-17T14:17:21.013

Modified: 2026-09-18T19:06:08.407

Link: CVE-2026-71568

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-71568", "assignerOrgId": "74b3a70d-cca6-4d34-9789-e83b222ae3be", "state": "PUBLISHED", "assignerShortName": "redhat-cnalr", "dateReserved": "2026-08-07T12:08:03.283Z", "datePublished": "2026-09-17T13:46:16.878Z", "dateUpdated": "2026-09-17T19:34:27.498Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "74b3a70d-cca6-4d34-9789-e83b222ae3be", "shortName": "redhat-cnalr", "dateUpdated": "2026-09-17T13:46:16.878Z"}, "title": "BMCtest exposes Ironic without authentication and TLS during the test", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-306", "description": "CWE-306 Missing authentication for critical function", "type": "CWE"}]}], "affected": [{"vendor": "openshift-metal3", "product": "bmctest", "repo": "https://github.com/openshift-metal3/bmctest/", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "9ddd432", "versionType": "git"}, {"status": "unaffected", "version": "153aefb", "versionType": "git"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "In BMCtest, Ironic is started without authentication and TLS for the duration of the test.\u00a0Exploiting the problem requires winning the race with bmctest itself, which reduces the attack window and significantly increases its complexity.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "In BMCtest, Ironic is started without authentication and TLS for the duration of the test. Exploiting the problem requires winning the race with <code>bmctest</code> itself, which reduces the attack window and significantly increases its complexity."}]}], "references": [{"url": "https://github.com/openshift-metal3/bmctest/security/advisories/GHSA-53vv-qh77-2hqh", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 5.3, "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-17T19:34:16.588105Z", "id": "CVE-2026-71568", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-17T19:34:27.498Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-71568", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-17T19:34:16.588105Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-17T19:34:22.933Z"}}], "cna": {"title": "BMCtest exposes Ironic without authentication and TLS during the test", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/openshift-metal3/bmctest/", "vendor": "openshift-metal3", "product": "bmctest", "versions": [{"status": "affected", "version": "0", "versionType": "git", "lessThanOrEqual": "9ddd432"}, {"status": "unaffected", "version": "153aefb", "versionType": "git"}], "defaultStatus": "unknown"}], "references": [{"url": "https://github.com/openshift-metal3/bmctest/security/advisories/GHSA-53vv-qh77-2hqh", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "In BMCtest, Ironic is started without authentication and TLS for the duration of the test.\u00a0Exploiting the problem requires winning the race with bmctest itself, which reduces the attack window and significantly increases its complexity.", "supportingMedia": [{"type": "text/html", "value": "In BMCtest, Ironic is started without authentication and TLS for the duration of the test. Exploiting the problem requires winning the race with <code>bmctest</code> itself, which reduces the attack window and significantly increases its complexity.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306 Missing authentication for critical function"}]}], "providerMetadata": {"orgId": "74b3a70d-cca6-4d34-9789-e83b222ae3be", "shortName": "redhat-cnalr", "dateUpdated": "2026-09-17T13:46:16.878Z"}}}, "cveMetadata": {"cveId": "CVE-2026-71568", "state": "PUBLISHED", "dateUpdated": "2026-09-17T19:34:27.498Z", "dateReserved": "2026-08-07T12:08:03.283Z", "assignerOrgId": "74b3a70d-cca6-4d34-9789-e83b222ae3be", "datePublished": "2026-09-17T13:46:16.878Z", "assignerShortName": "redhat-cnalr"}, "dataVersion": "5.2"}