Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for velero by vmware

    CVE-2020-3996 (GCVE-0-2020-3996)

    Vulnerability from nvd – Published: 2020-10-22 20:18 – Updated: 2024-08-04 07:52
    VLAI
    Summary
    Velero (prior to 1.4.3 and 1.5.2) in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users.
    Severity
    No CVSS data available.
    CWE
    • Information leakage due to incorrect volume assignment
    Assigner
    References
    Impacted products
    Vendor Product Version
    n/a Velero Affected: Velero versions 0.* and 1.* prior to 1.4.3 and 1.5.2
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T07:52:20.347Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/vmware-tanzu/velero/security/advisories/GHSA-72xg-3mcq-52v4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Velero",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Velero versions 0.* and 1.* prior to 1.4.3 and 1.5.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Velero (prior to 1.4.3 and 1.5.2) in some instances doesn\u2019t properly manage volume identifiers which may result in information leakage to unauthorized users."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information leakage due to incorrect volume assignment",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-22T20:18:07.000Z",
        "orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
        "shortName": "vmware"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vmware-tanzu/velero/security/advisories/GHSA-72xg-3mcq-52v4"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@vmware.com",
          "ID": "CVE-2020-3996",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Velero",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Velero versions 0.* and 1.* prior to 1.4.3 and 1.5.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Velero (prior to 1.4.3 and 1.5.2) in some instances doesn\u2019t properly manage volume identifiers which may result in information leakage to unauthorized users."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information leakage due to incorrect volume assignment"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/vmware-tanzu/velero/security/advisories/GHSA-72xg-3mcq-52v4",
              "refsource": "MISC",
              "url": "https://github.com/vmware-tanzu/velero/security/advisories/GHSA-72xg-3mcq-52v4"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
    "assignerShortName": "vmware",
    "cveId": "CVE-2020-3996",
    "datePublished": "2020-10-22T20:18:07.000Z",
    "dateReserved": "2019-12-30T00:00:00.000Z",
    "dateUpdated": "2024-08-04T07:52:20.347Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2020-3996 (GCVE-0-2020-3996)

    Vulnerability from cvelistv5 – Published: 2020-10-22 20:18 – Updated: 2024-08-04 07:52
    VLAI
    Summary
    Velero (prior to 1.4.3 and 1.5.2) in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users.
    Severity
    No CVSS data available.
    CWE
    • Information leakage due to incorrect volume assignment
    Assigner
    References
    Impacted products
    Vendor Product Version
    n/a Velero Affected: Velero versions 0.* and 1.* prior to 1.4.3 and 1.5.2
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T07:52:20.347Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/vmware-tanzu/velero/security/advisories/GHSA-72xg-3mcq-52v4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Velero",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Velero versions 0.* and 1.* prior to 1.4.3 and 1.5.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Velero (prior to 1.4.3 and 1.5.2) in some instances doesn\u2019t properly manage volume identifiers which may result in information leakage to unauthorized users."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information leakage due to incorrect volume assignment",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-22T20:18:07.000Z",
        "orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
        "shortName": "vmware"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vmware-tanzu/velero/security/advisories/GHSA-72xg-3mcq-52v4"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@vmware.com",
          "ID": "CVE-2020-3996",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Velero",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Velero versions 0.* and 1.* prior to 1.4.3 and 1.5.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Velero (prior to 1.4.3 and 1.5.2) in some instances doesn\u2019t properly manage volume identifiers which may result in information leakage to unauthorized users."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information leakage due to incorrect volume assignment"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/vmware-tanzu/velero/security/advisories/GHSA-72xg-3mcq-52v4",
              "refsource": "MISC",
              "url": "https://github.com/vmware-tanzu/velero/security/advisories/GHSA-72xg-3mcq-52v4"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
    "assignerShortName": "vmware",
    "cveId": "CVE-2020-3996",
    "datePublished": "2020-10-22T20:18:07.000Z",
    "dateReserved": "2019-12-30T00:00:00.000Z",
    "dateUpdated": "2024-08-04T07:52:20.347Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}