CVE-2018-1069

OpenShift OpenShift Enterprise 3.7 is affected by CVE-2018-1069, where container network filesystems (GlusterFS/NFS) can have their UserID/GroupID restrictions overridden because Openshift does not validate them before transmission over the network. This can allow an attacker to read or write arb...

CVE-2018-1069

GlusterFS and NFS network filesystems rely on File System User ID and Group ID information in order to restrict access to file shares. However, it's possible to overwrite the Openshift restrictions on container UserId and GroupdId as they are not validated before being sent over the Openshift...