GitHub Advisoryadvisory · Go

GHSA-rm7c-x6gj-2mr8 Heketi logs sensitive information

MEDIUM Published 2022-05-24 Modified 2024-04-24 Official page ↗
Aliases
CVE-2020-10763
Ecosystem
Go
Packages
github.com/heketi/heketi
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-532
Reviewed
2024-04-24

Affected packages

• Go github.com/heketi/heketi: < 10.1.0 → fixed in 10.1.0

Description

An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read potentially sensitive information such as gluster-block passwords.

Related

Alias · CVE (1)

  • CVE-2020-10763 An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. vulnerability

Weakness · CWE (1)

  • CWE-532 Insertion of Sensitive Information into Log File weakness

References