GCVE - cpe:2.3:a:heketi:heketi:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:heketi:heketi:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-15104`	vulnerable	2026-06-08 05:08:57.917485	Details available An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file. Published: 2017-12-18T19:00:00.000Z Updated: 2024-08-05T19:50:15.558Z Open on db.gcve.eu Reference links https://access.redhat.com/errata/RHSA-2017:3481 https://bugzilla.redhat.com/show_bug.cgi?id=1510149 https://access.redhat.com/security/cve/CVE-2017-15104 https://github.com/heketi/heketi/releases/tag/v5.0.1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-15103`	vulnerable	2026-06-08 05:08:57.916272	Details available A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially crafted requests to the Heketi server, resulting in remote command execution as the user running Heketi server and possibly privilege escalation. Published: 2017-12-18T19:00:00.000Z Updated: 2024-08-05T19:50:15.563Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=1510147 https://access.redhat.com/errata/RHSA-2017:3481 https://access.redhat.com/security/cve/CVE-2017-15103	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.