CVE-2018-1088CWE-266

A privilege escalation flaw was found in gluster 3.x snapshot scheduler

published April 18, 2018

CVSS
—
EPSS
5%
Percentile
92.7
In the wild
Unconfirmed
What it is

A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05487 · 92.7th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2018-04-18T16:00Z
EPSS history
Timeline
  • 18 APR 16:00Z
    A privilege escalation flaw was found in gluster 3.x snapshot scheduler
    cvelistv5