What is GHSA-rm7c-x6gj-2mr8?

GHSA-rm7c-x6gj-2mr8 is a security advisory published by GitHub Security Advisories with Medium severity. Heketi logs sensitive information

Which CVE IDs does GHSA-rm7c-x6gj-2mr8 cover?

GHSA-rm7c-x6gj-2mr8 covers the following CVE IDs: CVE-2020-10763. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rm7c-x6gj-2mr8?

GHSA-rm7c-x6gj-2mr8 has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

Which products are affected by GHSA-rm7c-x6gj-2mr8?

GHSA-rm7c-x6gj-2mr8 affects 1 product, including: go/github.com/heketi/heketi:\u003c 10.1.0.

GHSA-rm7c-x6gj-2mr8MediumCVSS 5.5

Heketi logs sensitive information

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

April 24, 2024

🔗 CVE IDs covered (1)

CVE-2020-10763 →

📋 Description

An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read potentially sensitive information such as gluster-block passwords.

🎯 Affected products1

go/github.com/heketi/heketi:< 10.1.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-10763
https://bugzilla.redhat.com/show_bug.cgi?id=1845387
https://github.com/heketi/heketi/releases/tag/v10.1.0
https://github.com/heketi/heketi/commit/be1583833924e62d2581824a0addcba0aed33c99
https://github.com/advisories/GHSA-rm7c-x6gj-2mr8