CVE-2020-10762: Red Hat Gluster-Block

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block CLI operations. This includes recording passwords to the cmd_history.log file which is world-readable. This flaw allows local users to obtain sensitive information by reading the log file. The highest threat from this vulnerability is to data confidentiality.

Affected products

• Red Hat Gluster-Block: before 0.5.1 (fixed in 0.5.1)

Published 2020-11-24. Last modified 2026-06-17.