Login Request a demo
HE
Product
Heketi
by Heketi Project · last CVE Nov 24, 2020
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 2Medium 1Low 0
Severity
All severities4Critical1High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Heketi to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-3899
9.8
1%
Apr 22
It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse
Affected: All versions, or not specified
CVE-2017-15103
8.8
5%
Dec 18
A security-check flaw was found in the way the Heketi 5 server API handled user requests
Affected: 5.0
CVE-2017-15104
7.8
0%
Dec 18
An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable
Affected: 5.0.0
CVE-2020-10763
5.5
0%
Nov 24
An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information
Affected: before 10.1.0
Showing 4