CVEvulnerability

CVE-2020-10763

5.5 MEDIUM Published 2020-11-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-11-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-532

Description

An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read potentially sensitive information such as gluster-block passwords.

Affected configurations

• heketi project heketi (< 10.1.0) • redhat gluster storage 3.0 • redhat gluster storage 3.5 • redhat openshift container platform 4.0 • redhat enterprise linux 7.0

Related

Weakness · CWE (1)

  • CWE-532 Insertion of Sensitive Information into Log File weakness

References