CVE-2020-10763

Name of the Vulnerable Software and Affected Versions Heketi versions prior to 10.1.0

Description An information-disclosure flaw was found in the way Heketi logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read potentially sensitive information such as gluster-block passwords.

Recommendations For versions prior to 10.1.0, update to version 10.1.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the Heketi server logs to minimize the risk of exploitation.