Approved changes feed: RSS · Atom

cpe:2.3:a:heketi_project:heketi:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorHeketi Project (d397ca2c-dd19-5291-9b18-7ddbba42f554)
ProductHeketi (08677ad1-762a-5ba5-832e-64f186f5b889)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/heketi/heketi purl2cpe 2026-06-01 10:13:24.647493
pkg:docker/heketi/heketi purl2cpe 2026-06-01 10:13:24.647497
pkg:github/heketi/heketi purl2cpe 2026-06-01 10:13:24.647500

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3899 vulnerable 2026-06-08 05:13:56.332823 Details available
HIGH (7.3)
It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse. This isue only affects heketi as shipped with Openshift Container Platform 3.11.
Published: 2019-04-22T15:20:07.000Z
Updated: 2024-08-04T19:26:26.706Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.