VDB
CVE-2017-15103
CVE-2017-15103
PUBLISHED
Reported by redhat · Published December 18, 2017
A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially crafted requests to the Heketi server, resulting in remote command execution as the user running Heketi server and possibly privilege escalation.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Heketi | Heketi | 5.0 |
| Heketi | Heketi | 5.0, 5.0, 5.0 |
| github.com | heketi/heketi | 0, 0 |
Timeline
- Dec 18, 2017 CVE Published
- Oct 9, 2019 CVE Updated
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Dec 28, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Jul 4, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Jan 9, 2023 EPSS Score
References
- x_refsource_CONFIRM
- RHSA-2017:3481 vendor-advisoryx_refsource_REDHAT
- x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2017-15103 advisory