CVE-2020-10763

Опубликовано: 24 нояб. 2020

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read potentially sensitive information such as gluster-block passwords.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=1845387
Issue Tracking
Third Party Advisory
https://github.com/heketi/heketi/releases/tag/v10.1.0
Release Notes
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1845387
Issue Tracking
Third Party Advisory
https://github.com/heketi/heketi/releases/tag/v10.1.0
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:heketi_project:heketi:*:*:*:*:*:*:*:*

Версия до 10.1.0 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:redhat:gluster_storage:3.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:gluster_storage:3.5:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 15%

0.00048

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-532

Связанные уязвимости

CVE-2020-10763

CVSS3: 5.5

redhat

больше 5 лет назад

CVE-2020-10763

CVSS3: 5.5

debian

около 5 лет назад

An information-disclosure flaw was found in the way Heketi before 10.1 ...

GHSA-rm7c-x6gj-2mr8

CVSS3: 5.5

github

больше 3 лет назад

Heketi logs sensitive information

EPSS

Процентиль: 15%

0.00048

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-532