RedHatRHSA-2018:3829(RHSA-2018:3829) Moderate: RHGS WA security and bug fix update
0.014 Low
EPSS
Percentile
86.6%
Red Hat Gluster Storage Web Administration includes a fully automated setup based on Ansible and provides deep metrics and insights into active Gluster storage pools by using the Grafana platform. Red Hat Gluster Storage Web Administration provides a dashboard view which allows an administrator to get a view of overall gluster health in terms of hosts, volumes, bricks, and other components of GlusterFS.
Security Fix(es):
- grafana: authentication bypass knowing only a username of an LDAP or OAuth user (CVE-2018-15727)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
All users of Red Hat Gluster Storage Web Administration are advised to upgrade to these updated packages, which provide numerous bug fixes.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | noarch | tendrl-ui | < 1.6.3-14.el7rhgs | tendrl-ui-1.6.3-14.el7rhgs.noarch.rpm |
| RedHat | 7 | noarch | tendrl-api-httpd | < 1.6.3-8.el7rhgs | tendrl-api-httpd-1.6.3-8.el7rhgs.noarch.rpm |
| RedHat | 7 | noarch | tendrl-node-agent | < 1.6.3-11.el7rhgs | tendrl-node-agent-1.6.3-11.el7rhgs.noarch.rpm |
| RedHat | 7 | noarch | tendrl-grafana-plugins | < 1.6.3-16.el7rhgs | tendrl-grafana-plugins-1.6.3-16.el7rhgs.noarch.rpm |
| RedHat | 7 | noarch | tendrl-ansible | < 1.6.3-10.el7rhgs | tendrl-ansible-1.6.3-10.el7rhgs.noarch.rpm |
| RedHat | 7 | noarch | tendrl-api | < 1.6.3-8.el7rhgs | tendrl-api-1.6.3-8.el7rhgs.noarch.rpm |
| RedHat | 7 | x86_64 | grafana | < 4.6.4-1.el7rhgs | grafana-4.6.4-1.el7rhgs.x86_64.rpm |
| RedHat | 7 | noarch | tendrl-monitoring-integration | < 1.6.3-16.el7rhgs | tendrl-monitoring-integration-1.6.3-16.el7rhgs.noarch.rpm |
| RedHat | 7 | noarch | tendrl-gluster-integration | < 1.6.3-13.el7rhgs | tendrl-gluster-integration-1.6.3-13.el7rhgs.noarch.rpm |
Related
