CVE-2018-1088
- State
- Published
- Severity
- Not scored
- Published
- Apr 18, 2018
- Updated
- Aug 5, 2024
- Reserved
- Dec 4, 2017
Description
A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
glusterfsRed Hat, Inc. |
|
References
- RHSA-2018:1137vendor-advisory
- RHSA-2018:1275vendor-advisory
- RHSA-2018:1524vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1558721
- RHSA-2018:1136vendor-advisory
- GLSA-201904-06vendor-advisory
- openSUSE-SU-2020:0079vendor-advisory
- [debian-lts-announce] 20211101 [SECURITY] [DLA 2806-1] glusterfs security updatemailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.