Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2019-3899

Опубликовано: 22 апр. 2019
Источник: debian

Описание

It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse. This isue only affects heketi as shipped with Openshift Container Platform 3.11.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
heketiitppackage

Связанные уязвимости

CVSS3: 7.3
redhat
больше 7 лет назад

It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse. This isue only affects heketi as shipped with Openshift Container Platform 3.11.

CVSS3: 9.8
nvd
больше 7 лет назад

It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse. This isue only affects heketi as shipped with Openshift Container Platform 3.11.

CVSS3: 9.8
github
больше 4 лет назад

It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse. This isue only affects heketi as shipped with Openshift Container Platform 3.11.

CVSS3: 7.3
fstec
больше 7 лет назад

Уязвимость программного средства Heketi, связанная с отсутствием процедуры аутентификации в стандартных настройках, позволяющая нарушителю выполнить произвольные команды