Description (CNA)
Velero (prior to 1.4.3 and 1.5.2) in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Velero | affected Velero versions 0.* and 1.* prior to 1.4.3 and 1.5.2 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.