vulnerability
Red Hat: CVE-2019-3899: Moderate: heketi security, bug fix, and enhancement update (RHSA-2019:3255)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | Apr 22, 2019 | Oct 31, 2019 | Feb 14, 2023 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Apr 22, 2019
Added
Oct 31, 2019
Modified
Feb 14, 2023
Description
It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse. This isue only affects heketi as shipped with Openshift Container Platform 3.11.
Solution
redhat-upgrade-heketi-client
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.