Non évaluée
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connec...
CVE-2018-1112
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.
Références
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory review.gluster.org
- report bugzilla.redhat.com
- web lists.opensuse.org