vulnerability
Red Hat: CVE-2019-3899: Moderate: heketi security, bug fix, and enhancement update (RHSA-2019:3255)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | 2019-04-22 | 2019-10-31 | 2023-02-14 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
2019-04-22
Added
2019-10-31
Modified
2023-02-14
Description
It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse. This isue only affects heketi as shipped with Openshift Container Platform 3.11.
Solution
redhat-upgrade-heketi-client
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.