{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42997.json"
      }
    ],
    "title": "OpenStack Ironic: OpenStack Ironic: Information disclosure via credential forwarding during mold import",
    "tracking": {
      "current_release_date": "2026-07-15T09:56:18+00:00",
      "generator": {
        "date": "2026-07-15T09:56:18+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.2"
        }
      },
      "id": "CVE-2026-42997",
      "initial_release_date": "2026-05-05T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-05-05T00:00:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-25T06:56:28+00:00",
          "number": "2",
          "summary": "Current version"
        },
        {
          "date": "2026-07-15T09:56:18+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4",
                  "product_id": "red_hat_openshift_container_platform_4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Container Platform 4"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenStack Platform 16.2",
                "product": {
                  "name": "Red Hat OpenStack Platform 16.2",
                  "product_id": "red_hat_openstack_platform_16.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openstack:16.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenStack Platform 16.2"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenStack Platform 17.1",
                "product": {
                  "name": "Red Hat OpenStack Platform 17.1",
                  "product_id": "red_hat_openstack_platform_17.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openstack:17.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenStack Platform 17.1"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenStack Services on OpenShift 18.0",
                "product": {
                  "name": "Red Hat OpenStack Services on OpenShift 18.0",
                  "product_id": "9Base-RHOSO-18.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openstack:18.0::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenStack Services on OpenShift"
          },
          {
            "category": "product_version",
            "name": "python3-ironic-tests",
            "product": {
              "name": "python3-ironic-tests",
              "product_id": "python3-ironic-tests",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/python3-ironic-tests"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openstack-ironic.src",
            "product": {
              "name": "openstack-ironic.src",
              "product_id": "openstack-ironic.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/openstack-ironic?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openstack-ironic-api",
            "product": {
              "name": "openstack-ironic-api",
              "product_id": "openstack-ironic-api",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/openstack-ironic-api"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openstack-ironic-conductor",
            "product": {
              "name": "openstack-ironic-conductor",
              "product_id": "openstack-ironic-conductor",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/openstack-ironic-conductor"
              }
            }
          },
          {
            "category": "product_version",
            "name": "openstack-ironic-common",
            "product": {
              "name": "openstack-ironic-common",
              "product_id": "openstack-ironic-common",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/openstack-ironic-common"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openstack-ironic-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.src",
                "product": {
                  "name": "openstack-ironic-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.src",
                  "product_id": "openstack-ironic-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-ironic@21.4.5-18.0.20260616204937.9213ccd.el9ost?arch=src&epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openstack-ironic-api-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
                "product": {
                  "name": "openstack-ironic-api-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
                  "product_id": "openstack-ironic-api-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-ironic-api@21.4.5-18.0.20260616204937.9213ccd.el9ost?arch=noarch&epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-ironic-common-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
                "product": {
                  "name": "openstack-ironic-common-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
                  "product_id": "openstack-ironic-common-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-ironic-common@21.4.5-18.0.20260616204937.9213ccd.el9ost?arch=noarch&epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openstack-ironic-conductor-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
                "product": {
                  "name": "openstack-ironic-conductor-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
                  "product_id": "openstack-ironic-conductor-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openstack-ironic-conductor@21.4.5-18.0.20260616204937.9213ccd.el9ost?arch=noarch&epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-ironic-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.src as a component of Red Hat OpenStack Services on OpenShift 18.0",
          "product_id": "9Base-RHOSO-18.0:openstack-ironic-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.src"
        },
        "product_reference": "openstack-ironic-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.src",
        "relates_to_product_reference": "9Base-RHOSO-18.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-ironic-api-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch as a component of Red Hat OpenStack Services on OpenShift 18.0",
          "product_id": "9Base-RHOSO-18.0:openstack-ironic-api-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch"
        },
        "product_reference": "openstack-ironic-api-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
        "relates_to_product_reference": "9Base-RHOSO-18.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-ironic-common-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch as a component of Red Hat OpenStack Services on OpenShift 18.0",
          "product_id": "9Base-RHOSO-18.0:openstack-ironic-common-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch"
        },
        "product_reference": "openstack-ironic-common-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
        "relates_to_product_reference": "9Base-RHOSO-18.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-ironic-conductor-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch as a component of Red Hat OpenStack Services on OpenShift 18.0",
          "product_id": "9Base-RHOSO-18.0:openstack-ironic-conductor-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch"
        },
        "product_reference": "openstack-ironic-conductor-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
        "relates_to_product_reference": "9Base-RHOSO-18.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-ironic-api as a component of Red Hat OpenShift Container Platform 4",
          "product_id": "red_hat_openshift_container_platform_4:openstack-ironic-api"
        },
        "product_reference": "openstack-ironic-api",
        "relates_to_product_reference": "red_hat_openshift_container_platform_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-ironic-common as a component of Red Hat OpenShift Container Platform 4",
          "product_id": "red_hat_openshift_container_platform_4:openstack-ironic-common"
        },
        "product_reference": "openstack-ironic-common",
        "relates_to_product_reference": "red_hat_openshift_container_platform_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-ironic-conductor as a component of Red Hat OpenShift Container Platform 4",
          "product_id": "red_hat_openshift_container_platform_4:openstack-ironic-conductor"
        },
        "product_reference": "openstack-ironic-conductor",
        "relates_to_product_reference": "red_hat_openshift_container_platform_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-ironic.src as a component of Red Hat OpenShift Container Platform 4",
          "product_id": "red_hat_openshift_container_platform_4:openstack-ironic.src"
        },
        "product_reference": "openstack-ironic.src",
        "relates_to_product_reference": "red_hat_openshift_container_platform_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-ironic-tests as a component of Red Hat OpenShift Container Platform 4",
          "product_id": "red_hat_openshift_container_platform_4:python3-ironic-tests"
        },
        "product_reference": "python3-ironic-tests",
        "relates_to_product_reference": "red_hat_openshift_container_platform_4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-ironic-api as a component of Red Hat OpenStack Platform 16.2",
          "product_id": "red_hat_openstack_platform_16.2:openstack-ironic-api"
        },
        "product_reference": "openstack-ironic-api",
        "relates_to_product_reference": "red_hat_openstack_platform_16.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-ironic-common as a component of Red Hat OpenStack Platform 16.2",
          "product_id": "red_hat_openstack_platform_16.2:openstack-ironic-common"
        },
        "product_reference": "openstack-ironic-common",
        "relates_to_product_reference": "red_hat_openstack_platform_16.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-ironic-conductor as a component of Red Hat OpenStack Platform 16.2",
          "product_id": "red_hat_openstack_platform_16.2:openstack-ironic-conductor"
        },
        "product_reference": "openstack-ironic-conductor",
        "relates_to_product_reference": "red_hat_openstack_platform_16.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-ironic.src as a component of Red Hat OpenStack Platform 16.2",
          "product_id": "red_hat_openstack_platform_16.2:openstack-ironic.src"
        },
        "product_reference": "openstack-ironic.src",
        "relates_to_product_reference": "red_hat_openstack_platform_16.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-ironic-api as a component of Red Hat OpenStack Platform 17.1",
          "product_id": "red_hat_openstack_platform_17.1:openstack-ironic-api"
        },
        "product_reference": "openstack-ironic-api",
        "relates_to_product_reference": "red_hat_openstack_platform_17.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-ironic-common as a component of Red Hat OpenStack Platform 17.1",
          "product_id": "red_hat_openstack_platform_17.1:openstack-ironic-common"
        },
        "product_reference": "openstack-ironic-common",
        "relates_to_product_reference": "red_hat_openstack_platform_17.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-ironic-conductor as a component of Red Hat OpenStack Platform 17.1",
          "product_id": "red_hat_openstack_platform_17.1:openstack-ironic-conductor"
        },
        "product_reference": "openstack-ironic-conductor",
        "relates_to_product_reference": "red_hat_openstack_platform_17.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-ironic.src as a component of Red Hat OpenStack Platform 17.1",
          "product_id": "red_hat_openstack_platform_17.1:openstack-ironic.src"
        },
        "product_reference": "openstack-ironic.src",
        "relates_to_product_reference": "red_hat_openstack_platform_17.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-42997",
      "cwe": {
        "id": "CWE-201",
        "name": "Insertion of Sensitive Information Into Sent Data"
      },
      "discovery_date": "2026-05-05T19:01:17.710594+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "red_hat_openstack_platform_16.2:openstack-ironic-api",
            "red_hat_openstack_platform_16.2:openstack-ironic-common",
            "red_hat_openstack_platform_16.2:openstack-ironic-conductor",
            "red_hat_openstack_platform_16.2:openstack-ironic.src"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466844"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenStack Ironic. During the import process, a user invoking molds can request that authorization credentials be sent to a remote endpoint. This can lead to the disclosure of a time-limited Keystone token, which grants access to OpenStack services Ironic is authorized for, or basic credentials configured for molds storage. This information disclosure could allow an attacker to gain unauthorized access to other OpenStack services.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenStack Ironic: OpenStack Ironic: Information disclosure via credential forwarding during mold import",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This IMPORTANT information disclosure vulnerability in OpenStack Ironic allows authenticated users to forward credentials to attacker-controlled endpoints during mold import. The scope is changed as disclosed credentials can access other OpenStack services. Impact is high confidentiality loss. Fixed in versions 26.1.6, 29.0.5, 32.0.1, and 35.0.1.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSO-18.0:openstack-ironic-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.src",
          "9Base-RHOSO-18.0:openstack-ironic-api-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
          "9Base-RHOSO-18.0:openstack-ironic-common-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
          "9Base-RHOSO-18.0:openstack-ironic-conductor-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch"
        ],
        "known_affected": [
          "red_hat_openshift_container_platform_4:openstack-ironic-api",
          "red_hat_openshift_container_platform_4:openstack-ironic-common",
          "red_hat_openshift_container_platform_4:openstack-ironic-conductor",
          "red_hat_openshift_container_platform_4:openstack-ironic.src",
          "red_hat_openshift_container_platform_4:python3-ironic-tests",
          "red_hat_openstack_platform_17.1:openstack-ironic-api",
          "red_hat_openstack_platform_17.1:openstack-ironic-common",
          "red_hat_openstack_platform_17.1:openstack-ironic-conductor",
          "red_hat_openstack_platform_17.1:openstack-ironic.src"
        ],
        "known_not_affected": [
          "red_hat_openstack_platform_16.2:openstack-ironic-api",
          "red_hat_openstack_platform_16.2:openstack-ironic-common",
          "red_hat_openstack_platform_16.2:openstack-ironic-conductor",
          "red_hat_openstack_platform_16.2:openstack-ironic.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42997"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466844",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466844"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42997",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42997"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42997",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42997"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/05/05/10",
          "url": "https://www.openwall.com/lists/oss-security/2026/05/05/10"
        }
      ],
      "release_date": "2026-05-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-15T09:55:24+00:00",
          "details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-RHOSO-18.0:openstack-ironic-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.src",
            "9Base-RHOSO-18.0:openstack-ironic-api-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
            "9Base-RHOSO-18.0:openstack-ironic-common-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
            "9Base-RHOSO-18.0:openstack-ironic-conductor-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:39811"
        },
        {
          "category": "none_available",
          "details": "Affected",
          "product_ids": [
            "red_hat_openshift_container_platform_4:openstack-ironic-api",
            "red_hat_openshift_container_platform_4:openstack-ironic-common",
            "red_hat_openshift_container_platform_4:openstack-ironic-conductor",
            "red_hat_openshift_container_platform_4:openstack-ironic.src",
            "red_hat_openshift_container_platform_4:python3-ironic-tests",
            "red_hat_openstack_platform_17.1:openstack-ironic-api",
            "red_hat_openstack_platform_17.1:openstack-ironic-common",
            "red_hat_openstack_platform_17.1:openstack-ironic-conductor",
            "red_hat_openstack_platform_17.1:openstack-ironic.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSO-18.0:openstack-ironic-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.src",
            "9Base-RHOSO-18.0:openstack-ironic-api-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
            "9Base-RHOSO-18.0:openstack-ironic-common-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
            "9Base-RHOSO-18.0:openstack-ironic-conductor-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
            "red_hat_openshift_container_platform_4:openstack-ironic-api",
            "red_hat_openshift_container_platform_4:openstack-ironic-common",
            "red_hat_openshift_container_platform_4:openstack-ironic-conductor",
            "red_hat_openshift_container_platform_4:openstack-ironic.src",
            "red_hat_openshift_container_platform_4:python3-ironic-tests",
            "red_hat_openstack_platform_16.2:openstack-ironic-api",
            "red_hat_openstack_platform_16.2:openstack-ironic-common",
            "red_hat_openstack_platform_16.2:openstack-ironic-conductor",
            "red_hat_openstack_platform_16.2:openstack-ironic.src",
            "red_hat_openstack_platform_17.1:openstack-ironic-api",
            "red_hat_openstack_platform_17.1:openstack-ironic-common",
            "red_hat_openstack_platform_17.1:openstack-ironic-conductor",
            "red_hat_openstack_platform_17.1:openstack-ironic.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important",
          "product_ids": [
            "9Base-RHOSO-18.0:openstack-ironic-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.src",
            "9Base-RHOSO-18.0:openstack-ironic-api-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
            "9Base-RHOSO-18.0:openstack-ironic-common-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
            "9Base-RHOSO-18.0:openstack-ironic-conductor-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch",
            "red_hat_openshift_container_platform_4:openstack-ironic-api",
            "red_hat_openshift_container_platform_4:openstack-ironic-common",
            "red_hat_openshift_container_platform_4:openstack-ironic-conductor",
            "red_hat_openshift_container_platform_4:openstack-ironic.src",
            "red_hat_openshift_container_platform_4:python3-ironic-tests",
            "red_hat_openstack_platform_16.2:openstack-ironic-api",
            "red_hat_openstack_platform_16.2:openstack-ironic-common",
            "red_hat_openstack_platform_16.2:openstack-ironic-conductor",
            "red_hat_openstack_platform_16.2:openstack-ironic.src",
            "red_hat_openstack_platform_17.1:openstack-ironic-api",
            "red_hat_openstack_platform_17.1:openstack-ironic-common",
            "red_hat_openstack_platform_17.1:openstack-ironic-conductor",
            "red_hat_openstack_platform_17.1:openstack-ironic.src"
          ]
        }
      ],
      "title": "OpenStack Ironic: OpenStack Ironic: Information disclosure via credential forwarding during mold import"
    }
  ]
}