Lucene search

K
redhatcveRedhat.comRH:CVE-2018-10913
HistorySep 04, 2018 - 5:52 a.m.

CVE-2018-10913

2018-09-0405:52:04
redhat.com
access.redhat.com
12

0.002 Low

EPSS

Percentile

52.6%

An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via glusterfs FUSE to determine the existence of any file.

Mitigation

SELinux mitigates this issue on Red Hat Gluster Storage 3. SELinux should be in enforcing mode only as permissive mode does not block attacks.