PT-2018-10054 · Red Hat+1 · Red Hat Openshift Enterprise+2

Andreas Skoglund · Publicado 2018-03-09 · Atualizado 2019-10-09 · CVE-2018-1069

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift Enterprise version 3.7

Description The issue allows an attacker to override access control for container network filesystems, specifically for GlusterFS and NFS. This could enable the attacker to read and write any data on the network filesystem by overriding the UserId and GroupId.

Recommendations For Red Hat OpenShift Enterprise version 3.7, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Improper Access Control

Enumeração de Fraquezas

CWE-732

CWE-284

Identificadores relacionados

CVE-2018-1069

Produtos afetados

Glusterfs

Nfs

Red Hat Openshift Enterprise

Referências · 4

• https://osv.dev/vulnerability/CVE-2018-1069 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1069 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=1552987 · Nota
• http://securityfocus.com/bid/103364 · Nota