Lucene search

CVE-2017-15104

🗓️ 18 Dec 2017 19:00:29Reported by redhatType

Access flaw in Heketi 5, world-readable heketi.json configuration fil

Reporter	Title	Published	Views	Family All 19
Veracode	Information Disclosure Through Insecure Defaults	19 Dec 201717:55	–	veracode
OSV	Information Exposure in Heketi in github.com/heketi/heketi	21 Aug 202415:29	–	osv
OSV	Information Exposure in Heketi	15 Feb 202201:57	–	osv
OSV	CVE-2017-15104	18 Dec 201719:29	–	osv
OSV	Red Hat Security Advisory: heketi security update	16 Sep 202400:51	–	osv
Cvelist	CVE-2017-15104	18 Dec 201719:00	–	cvelist
Prion	Design/Logic Flaw	18 Dec 201719:29	–	prion
NVD	CVE-2017-15104	18 Dec 201719:29	–	nvd
Github Security Blog	Information Exposure in Heketi	15 Feb 202201:57	–	github
RedhatCVE	CVE-2017-15104	18 Dec 201717:16	–	redhatcve

Nvd

Vulners

Node

heketi_project heketiMatch5.0.0

Node

redhat enterprise_linuxMatch7.0

[
  {
    "product": "Heketi",
    "vendor": "Heketi",
    "versions": [
      {
        "status": "affected",
        "version": "5.0"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/errata/RHSA-2017:3481
github	www.github.com/heketi/heketi/releases/tag/v5.0.1
access	www.access.redhat.com/security/cve/CVE-2017-15104

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Dec 2017 19:29Current

7.2High risk

Vulners AI Score7.2

CVSS22.1

CVSS37.8

EPSS0.001