Unrated
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connec...
CVE-2018-1112
First seen on SecPulse
Original description The description as published by the source.
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.
References
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory review.gluster.org
- report bugzilla.redhat.com
- web lists.opensuse.org