GHSA-rm7c-x6gj-2mr8

Source

https://github.com/advisories/GHSA-rm7c-x6gj-2mr8

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-rm7c-x6gj-2mr8/GHSA-rm7c-x6gj-2mr8.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-rm7c-x6gj-2mr8

Aliases

CVE-2020-10763

Published

2022-05-24T17:34:51Z

Modified

2024-04-24T21:58:45.470797Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

Heketi logs sensitive information

Details

An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read potentially sensitive information such as gluster-block passwords.

Database specific

{
    "nvd_published_at": "2020-11-24T17:15:00Z",
    "cwe_ids": [
        "CWE-532"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2024-04-24T21:35:03Z"
}

References

Affected packages

Go / github.com/heketi/heketi

Package

Name: github.com/heketi/heketi; View open source insights on deps.dev
Purl: pkg:golang/github.com/heketi/heketi

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10.1.0