Red Hat Security AdvisoryRHSA-2018:1268
glusterfs security update
Released 2018-04-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Gluster Storage Server 3.3 on RHEL-6 glusterfs-3.8.4-54.9.el6rhs, glusterfs-api-3.8.4-54.9.el6rhs, glusterfs-api-devel-3.8.4-54.9.el6rhs +11
- Red Hat Storage Native Client for Red Hat Enterprise Linux 6 glusterfs-3.8.4-54.9.el6, glusterfs-api-3.8.4-54.9.el6, glusterfs-api-devel-3.8.4-54.9.el6 +7
Fixes 1 record
Priority MEDIUM 43
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02347 · Published 2018-04-25 · Fixed CWE-287
