VDB
CVE-2017-15103
CVE-2017-15103
PUBLISHED
CVSS 8.800000190734863 HIGH
Reported by redhat · Published December 18, 2017
A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially crafted requests to the Heketi server, resulting in remote command execution as the user running Heketi server and possibly privilege escalation.
Risk Scores
CVSS 3.0
8.800000190734863
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Heketi | Heketi | 5.0 |
| Heketi | Heketi | 5.0, 5.0, 5.0 |
| github.com | heketi/heketi | 0, 0 |
Timeline
- Dec 18, 2017 CVE Published
- Oct 9, 2019 CVE Updated
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Oct 27, 2021 EPSS Score
- Dec 29, 2021 EPSS Score
- Mar 2, 2022 EPSS Score
- May 4, 2022 EPSS Score
- Jul 6, 2022 EPSS Score
- Nov 10, 2022 EPSS Score
- Jan 12, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
References
- x_refsource_CONFIRM
- RHSA-2017:3481 vendor-advisoryx_refsource_REDHAT
- x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2017-15103 advisory