icon

We found results for “

CVE-2017-15104

Good to know:

icon

Date: December 18, 2017

An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file.

Language: Go

Severity Score

Severity Score

Weakness Type (CWE)

Files or Directories Accessible to External Parties

CWE-552

Information Leak / Disclosure

CWE-200

Top Fix

icon

Upgrade Version

Upgrade to version v5.0.1

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): NONE
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us