A vulnerability was found in metal3-io ironic-image up to 24.1.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to authentication bypass using alternate channel.

This vulnerability was named CVE-2024-31463. The attack needs to be approached locally. There is no exploit available.

It is recommended to upgrade the affected component.