Vulnerabilities > Heketi Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-11-24 | CVE-2020-10763 | Information Exposure Through Log Files vulnerability in multiple products An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. | 2.1 |
| 2019-04-22 | CVE-2019-3899 | DEPRECATED: Authentication Bypass Issues vulnerability in multiple products It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse. | 9.8 |
| 2017-12-18 | CVE-2017-15104 | Files or Directories Accessible to External Parties vulnerability in multiple products An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. | 7.8 |
| 2017-12-18 | CVE-2017-15103 | OS Command Injection vulnerability in multiple products A security-check flaw was found in the way the Heketi 5 server API handled user requests. | 8.8 |