CVE-2020-10762

An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block CLI operations. This includes recording passwords to the cmd_history.log file which is world-readable. This flaw allows local users to obtain sensitive information by reading the log file. The highest threat from this vulnerability is to data confidentiality.

• CWE-732
• CWE-532

• https://bugzilla.redhat.com/show_bug.cgi?id=1845067Issue Tracking, Mitigation, Vendor Advisory
• https://github.com/gluster/gluster-block/releases/tag/v0.5.1Release Notes, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1845067Issue Tracking, Mitigation, Vendor Advisory
• https://github.com/gluster/gluster-block/releases/tag/v0.5.1Release Notes, Third Party Advisory

Published

Nov 24, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10757A flaw was found in the Linux Kernel in versions after 4.5-r…7.8
• CVE-2020-10758A vulnerability was found in Keycloak before 11.0.1 where Do…7.5
• CVE-2020-10759A PGP signature bypass flaw was found in fwupd (all versions…6
• CVE-2020-1076A denial of service vulnerability exists when Windows improp…5.5
• CVE-2020-10760A use-after-free flaw was found in all samba LDAP server ver…6.5
• CVE-2020-10761An assertion failure issue was found in the Network Block De…5
• CVE-2020-10763An information-disclosure flaw was found in the way Heketi b…5.5
• CVE-2020-10764Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-10765Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-10766A logic bug flaw was found in Linux kernel before 5.8-rc1 in…5.5
• CVE-2020-10767A flaw was found in the Linux kernel before 5.8-rc1 in the i…5.5
• CVE-2020-10768A flaw was found in the Linux Kernel before 5.8-rc1 in the p…5.5