GHSA-rm7c-x6gj-2mr8

ghsaUSosv

Heketi logs sensitive information

view advisory published 2022-05-24Licence: CC-BY-4.0

An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read potentially sensitive information such as gluster-block passwords.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-10763US	medium5.5	0.42% (36th)	—	2020-11-24
An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read pot…

references

External citations — patches, advisories, analysis.

https://bugzilla.redhat.com/show_bug.cgi?id=1845387WEB
https://github.com/heketi/heketi/commit/be1583833924e62d2581824a0addcba0aed33c99WEB
https://github.com/heketi/heketi/releases/tag/v10.1.0WEB
https://nvd.nist.gov/vuln/detail/CVE-2020-10763ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan