Information Disclosure

2020-10-0103:55:57

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

github.com/heketi/heketi is vulnerable to information disclosure. An attacker with local access to the Heketi server is able to read confidential information, such as the gluster-block passwords due to insecure logging of information.

CPENameOperatorVersion
gluster-blockeq0.2.1__14.1.el7rhgs
gluster-blockeq0.2.1__34.el7rhgs
gluster-blockeq0.2.1__36.el7rhgs
gluster-blockeq0.2.1__28.el7rhgs
gluster-blockeq0.2.1__32.el7rhgs
gluster-blockeq0.2.1__31.el7rhgs
gluster-blockeq0.2.1__26.el7rhgs
gluster-blockeq0.2.1__35.el7rhgs
gluster-blockeq0.2.1__14.el7rhgs
gluster-blockeq0.2.1__30.el7rhgs

Name	Operator	Version
gluster-block	eq	0.2.1__14.1.el7rhgs
gluster-block	eq	0.2.1__34.el7rhgs
gluster-block	eq	0.2.1__36.el7rhgs
gluster-block	eq	0.2.1__28.el7rhgs
gluster-block	eq	0.2.1__32.el7rhgs
gluster-block	eq	0.2.1__31.el7rhgs
gluster-block	eq	0.2.1__26.el7rhgs
gluster-block	eq	0.2.1__35.el7rhgs
gluster-block	eq	0.2.1__14.el7rhgs
gluster-block	eq	0.2.1__30.el7rhgs