PT-2020-17823

CVE-2020-3996

Published

2020-10-22

Updated

2024-06-15

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Velero versions prior to 1.4.3 Velero versions prior to 1.5.2

Description The issue is related to improper management of volume identifiers, which may lead to information leakage to unauthorized users.

Recommendations For versions prior to 1.4.3, update to version 1.4.3 or later. For versions prior to 1.5.2, update to version 1.5.2 or later.

Exploitability

Fix

Researchers

Vendors

Affected products

Related identifiers

GHSA-72XG-3MCQ-52V4

OPENSUSE-SU-2024:11494-1

Found an issue in the description? Have something to add? Feel free to write us 👾