CVE-2020-10762
N/A
N/A
Summary
An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block CLI operations. This includes recording passwords to the cmd_history.log file which is world-readable. This flaw allows local users to obtain sensitive information by reading the log file. The highest threat from this vulnerability is to data confidentiality.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | gluster-block | gluster-block 0.5.1 | affected |
Weaknesses
- CWE-732: CWE-732->CWE-532
ADP Enrichment
CVE Program Container
Additional References
- https://bugzilla.redhat.com/show_bug.cgi?id=1845067
- https://github.com/gluster/gluster-block/releases/tag/v0.5.1
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1845067
- https://github.com/gluster/gluster-block/releases/tag/v0.5.1
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.