PT-2018-10179

CVE-2018-10913

·

Published

2018-09-04

·

Updated

2022-04-22

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions glusterfs server (affected versions not specified)
Description An information disclosure issue was found in the glusterfs server, where an attacker could send a xattr request via glusterfs FUSE to check if any file exists.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-209: Generation of Error Message Containing Sensitive Information
Related identifiers
CVE-2018-10913
ALT-PU-2018-2484
CESA-2018_2607
DLA-1510-1
DLA-2806-1
OPENSUSE-SU-2020:0079-1
OPENSUSE-SU-2020_0079-1
RHSA-2018:2607
RHSA-2018:2608
RHSA-2018:3470
USN-4770-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com