CVE-2017-15104

CVE-2017-15104

Vendor Heketi
Product Heketi
Weakness CWE-552 · Files accessible externally
Published December 18, 2017
Last update August 5, 2024

CVSS base score

What the vulnerability does

01Description

An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file.

Key dates

02Disclosure timeline

December 18, 2017 CVE published
August 5, 2024 Record updated