CVE-2019-3899

Description

It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse. This isue only affects heketi as shipped with Openshift Container Platform 3.11.

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3899

https://access.redhat.com/errata/RHSA-2019:3255

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3