VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 22, 2019· Updated Jun 17, 2026

CVE-2019-3899

CVE-2019-3899

Description

It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse. This isue only affects heketi as shipped with Openshift Container Platform 3.11.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Heketi/Heketi
    cpe:2.3:a:heketi_project:heketi:-:*:*:*:*:*:*:*
  • Red Hat/Openshift Container Platform2 versions
    cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*
    • (no CPE)range: 3.11
  • The Heketi Project/heketiv5
    Range: heketi 6 as shipped with Openshift Container Platform 3.11

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.