CVE-2017-15104

2017-12-1819:00:00

CWE-552

redhat

www.cve.org

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.3%

JSON

An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file.

CNA Affected

[
  {
    "product": "Heketi",
    "vendor": "Heketi",
    "versions": [
      {
        "status": "affected",
        "version": "5.0"
      }
    ]
  }
]