VULNERABILITY INTELLIGENCE

CVE-2020-10763

CVSS score5.5 MEDIUM

EPSS probability0.42%

CISA KEVNot currently listed

Published2020-11-24

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read potentially sensitive information such as gluster-block passwords.

Weakness classification

secalert@redhat.com: CWE-532
nvd@nist.gov: CWE-532

Primary references

secalert@redhat.com — Issue Tracking, Third Party Advisory
secalert@redhat.com — Release Notes, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Third Party Advisory