未評価
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connec...
CVE-2018-1112
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.
参照URL
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory review.gluster.org
- report bugzilla.redhat.com
- web lists.opensuse.org