Red Hat Security Advisory

RHSA-2017:3481

heketi security update

Released 2017-12-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Gluster Storage Server 3.3 on RHEL-7 heketi-5.0.0-19.el7rhgs, heketi-client-5.0.0-19.el7rhgs, python-heketi-5.0.0-19.el7rhgs

TI-2017-11077 CVE-2017-15103 · GHSA-6g56-v9qg-jp92

MEDIUM 46

A security-check flaw was found in the way the Heketi 5 server API handled user requests.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.05495 Published 2017-12-18 Fixed in 5.0.1 CWE-78

TI-2017-11078 CVE-2017-15104 · GHSA-q9vw-wr57-xjv3

LOW 34

An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00428 Published 2017-12-18 Fixed in 5.0.1 CWE-552