Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-1112
7.5
HIGHCVSS v2
Published
April 25, 2018
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.
gluster/glusterfs
GitHubGluster Filesystem : Build your distributed storage in minutes
GitHubGluster Filesystem : Build your distributed storage in minutes< 3.10.12, = 4.0.2NVD