CVE-2017-15104

2017-12-1819:29:00

Google

osv.dev

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.3%

JSON

An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file.

CPENameOperatorVersion
heketieq0.1
heketieq2.0.5-de
heketieq2.0.0rc1
heketieq0.2
heketieq2.0.2-de
heketieq2.0.4-de
heketieq1.2.0-de
heketieq2.0.1-de
heketieq1.3.0-de
heketieq3.0.0