CVE-2018-1088CWE-266

CVE-2018-1088: vulnerability in Red Hat, Inc. glusterfs

Published · Updated

Follow this CVE+ Monitor glusterfs+ Monitor glusterfs

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 5.5%
A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.
Affected products
Red Hat, Inc. · glusterfs