vulnerability
CentOS Linux: CVE-2019-3899: Moderate: heketi security, bug fix, and enhancement update (CESA-2019:3255)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | Apr 22, 2019 | Oct 31, 2019 | May 25, 2023 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Apr 22, 2019
Added
Oct 31, 2019
Modified
May 25, 2023
Description
It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse. This isue only affects heketi as shipped with Openshift Container Platform 3.11.
Solution
centos-upgrade-heketi-client
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.