CVE-2017-15104 | BDVDB-2026-94190 Detail

HeketiHeketi

Description#

An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-552

References#

https://access.redhat.com/errata/RHSA-2017:3481
https://bugzilla.redhat.com/show_bug.cgi?id=1510149
https://access.redhat.com/security/cve/CVE-2017-15104
https://github.com/heketi/heketi/releases/tag/v5.0.1

Exploit#

No public exploit known

History#

Version 12017-12-18Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.