CVE-2018-10926CWE-20

A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server

High · published September 4, 2018

CVSS v3.0
8.1
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execute arbitrary code on a glusterfs server node.

The record
Technical detail
CVSS v3.0
8.1 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.02579 · 85.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-09-04T15:00Z
EPSS history
Timeline
  • 04 SEP 15:00Z
    A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server
    cvelistv5