Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2020-10762 Details

Description

An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block CLI operations. This includes recording passwords to the cmd_history.log file which is world-readable. This flaw allows local users to obtain sensitive information by reading the log file. The highest threat from this vulnerability is to data confidentiality.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://bugzilla.redhat.com/show_bug.cgi?id=1845067 CVEIssue TrackingMitigationVendor Advisory
https://github.com/gluster/gluster-block/releases/tag/v0.5.1 CVERelease NotesThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1845067 [email protected]Issue TrackingMitigationVendor Advisory
https://github.com/gluster/gluster-block/releases/tag/v0.5.1 [email protected]Release NotesThird Party Advisory

Weakness Enumeration

CWE-IDCWE NameSource
CWE-532Insertion of Sensitive Information into Log File[email protected]
CWE-732Incorrect Permission Assignment for Critical Resource[email protected]

Affected Products

ProductVersions
redhat gluster-block
< 0.5.1

CPE

  • cpe:2.3:a:redhat:gluster-block:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2020-10762
NVD Published Date:
Nov 24, 2020
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2020-10762 Details - Not Deferred