Information Exposure in Heketi

An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file...

Heketi Information Disclosure Vulnerability

Heketi is a REST-based GlusterFS management framework that provides a RESTful management interface that can be used to manage the lifecycle of GlusterFS. An information disclosure vulnerability exists in Heketi version 5, which stems from a program that sets the heketi.json configuration file to ...

Design/Logic Flaw

An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file...