TI-2019-02907 CVE-2019-3899 · GHSA-g8m6-5j3r-8xg4
Missing authentication in heketi
Priority MEDIUM 45
It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse.
RHSA-2019:3255
heketi security, bug fix, and enhancement update
Released 2019-10-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Gluster Storage Server 3.5 on RHEL-7 heketi-9.0.0-7.el7rhgs, heketi-client-9.0.0-7.el7rhgs, python-heketi-9.0.0-7.el7rhgs
- Red Hat Storage Native Client for Red Hat Enterprise Linux 7 heketi-9.0.0-7.el7rhgs, heketi-client-9.0.0-7.el7rhgs