CVE-2020-3996

Published October 22nd, 2020

View on NVD ↗

CVSS v3

5.5

MEDIUM

CVSS v2

2.1

LOW

Affected

PROJECT

Description

Velero (prior to 1.4.3 and 1.5.2) in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users.

velero-io/velero

Backup and migrate Kubernetes applications and their persistent volumes

GitHub

10K