Red Hat Security AdvisoryRHSA-2018:1269
glusterfs security update
Released 2018-04-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Gluster Storage Server 3.3 on RHEL-7 glusterfs-3.8.4-54.8.el7rhgs, glusterfs-api-3.8.4-54.8.el7rhgs, glusterfs-api-devel-3.8.4-54.8.el7rhgs +12
- Red Hat Storage Native Client for Red Hat Enterprise Linux 7 glusterfs-3.8.4-54.8.el7, glusterfs-api-3.8.4-54.8.el7, glusterfs-api-devel-3.8.4-54.8.el7 +7
- Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts glusterfs-3.8.4-54.8.el7, glusterfs-api-3.8.4-54.8.el7, glusterfs-api-devel-3.8.4-54.8.el7 +7
Fixes 1 record
Priority MEDIUM 43
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02347 · Published 2018-04-25 · Fixed CWE-287
