RHSA-2020:4143MediumCVSS 5.5
Red Hat Security Advisory: OCS 3.11.z async security, bug fix, and enhancement update
🔗 CVE IDs covered (2)
📋 Description
CVE-2020-10762 — gluster-block: information disclosure through world-readable gluster-block log files CVE-2020-10763 — heketi: gluster-block volume password details available in logs
🔗 References (9)
- selfhttps://access.redhat.com/errata/RHSA-2020:4143
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1845067
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1845387
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1850072
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1850077
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1850361
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1855178
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4143.json