medium5.5
CVE-2020-3996
Velero (prior to 1.4.3 and 1.5.2) in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users.
Impact
Velero (prior to 1.4.3 and 1.5.2) in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Velero | before 1.4.3 from 1.5.0 before 1.5.2 |