| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/heketi/heketi | < 5.0.1< 5.0.1+incompatible | 5.0.15.0.1+incompatible |
| heketi | = 5.0.0 |
An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free