Security Advisory
CVE-2019-3899
9.8
CRITICAL
Vulnerability Description
It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse. This isue only affects heketi as shipped with Openshift Container Platform 3.11.
Published Date
April 22, 2019
Official Source
NIST NVD Advisory