CVE-2017-15104

Source

https://nvd.nist.gov/vuln/detail/CVE-2017-15104

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15104.json

Aliases

• GHSA-q9vw-wr57-xjv3

Published

2017-12-18T19:29:00Z

Modified

2023-11-29T06:07:36.902247Z

Details

An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file.

References

• https://access.redhat.com/errata/RHSA-2017:3481
• https://bugzilla.redhat.com/show_bug.cgi?id=1510149
• https://access.redhat.com/security/cve/CVE-2017-15104
• https://github.com/heketi/heketi/releases/tag/v5.0.1