Bitnami/Mariadb Galera Helm Chart
Approved changes feed: RSS · Atom
cpe:2.3:a:bitnami:bitnami/mariadb-galera_helm_chart:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bitnami (912f172b-74a5-5499-ba7c-0ec38b677587) |
|---|---|
| Product | Bitnami/Mariadb Galera Helm Chart (ab68748e-42ef-54e6-8fd8-475c53726e49) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-47847 |
vulnerable | 2026-07-29 00:55:00.458943 |
Details available
MEDIUM (5.3)
Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in the Galera replication health-check user. The MARIADB_REPLICATION_USER and MARIADB_REPLICATION_PASSWORD environment variables defaulted to monitor and monitor respectively. This user is granted REPLICATION CLIENT privileges from any host ('%'). The Bitnami Helm chart for MariaDB Galera did not expose parameters to configure this user's credentials, resulting in all chart deployments using this publicly known credential by default.
Affected versions — Container image: 10.6.x prior to 10.6.27-photon-5-r0; 10.11.x prior to 10.11.17-photon-5-r1; 11.4.x prior to 11.4.12-photon-5-r0; 11.8.x prior to 11.8.7-photon-5-r1; 12.3.x prior to 12.3.2-photon-5-r0 / 12.3.2-debian-12-r0. Helm chart: prior to 18.3.0.
Published: 2026-06-18T18:37:47.677Z
Updated: 2026-06-18T20:24:27.928Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.