CVE-2018-1112
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8epss 2.4%
exploitation probability
2.4%top 17% of all CVEs
observed exploitation
nono source reports it
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.
CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
unspecified · glusterfsReferences
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.htmlhttps://access.redhat.com/articles/3422521https://access.redhat.com/errata/RHSA-2018:1268https://access.redhat.com/errata/RHSA-2018:1269https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1112https://review.gluster.org/#/c/19899/1..2