CVE-2018-1069CWE-284

Red Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container network filesystems

published March 9, 2018

CVSS
—
EPSS
1%
Percentile
46.8
In the wild
Unconfirmed
What it is

Red Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container network filesystems. An attacker could override the UserId and GroupId for GlusterFS and NFS to read and write any data on the network filesystem.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00577 · 46.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2018-03-09T14:00Z
EPSS history
Timeline
  • 09 MAR 14:00Z
    Red Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container network filesystems
    cvelistv5