Lucene search

K
osvGoogleOSV:CVE-2018-1112
HistoryApr 25, 2018 - 12:29 p.m.

CVE-2018-1112

2018-04-2512:29:00
Google
osv.dev
8

AI Score

8.4

Confidence

High

EPSS

0.008

Percentile

81.9%

glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using ‘auth.allow’ option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.