TI-2018-01044 CVE-2018-1127 · GHSA-jwq3-h8rx-wcwj
Insufficient session expiration in Red Hat Gluster Storage
Priority LOW 38
Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out.
RHSA-2018:2616
RHGS WA security, bug fix, and enhancement update
Released 2018-09-05 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Gluster 3.4 Web Administration Node Agent on RHEL-7 tendrl-commons-1.6.3-12.el7rhgs, tendrl-gluster-integration-1.6.3-10.el7rhgs, tendrl-node-agent-1.6.3-10.el7rhgs
- Red Hat Gluster 3.4 Web Administration on RHEL-7 python-flask-1:0.10.1-5.el7rhgs, python-flask-doc-1:0.10.1-5.el7rhgs, python-itsdangerous-0.23-2.el7 +9