CVE-2018-1069: High severity red hat openshift vulnerability
GlusterFS and NFS network filesystems rely on File System User ID and Group ID information in order to restrict access to file shares. However it's possible to overwrite the Openshift restrictions on container UserId and GroupdId as they are not validated before being sent over the Openshift Networking. An attacker could use the flaw to read and write any data on the network filesystem.
Other sources
Red Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container network filesystems. An attacker could override the UserId and GroupId for GlusterFS and NFS to read and write any data on the network filesystem.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1069?
CVE-2018-1069 has been classified with a medium severity level due to its potential impact on file share access controls.
How do I fix CVE-2018-1069?
To fix CVE-2018-1069, you should update to the latest patched version of Red Hat OpenShift that addresses this vulnerability.
What systems are affected by CVE-2018-1069?
CVE-2018-1069 affects Red Hat OpenShift version 3.7, specifically related to GlusterFS and NFS filesystems.
What are the implications of CVE-2018-1069?
The implications of CVE-2018-1069 include the risk of unauthorized access to file shares due to the failure to validate user IDs and group IDs.
Is there a workaround for CVE-2018-1069?
While the primary recommendation is to apply the update, additional security measures such as restricting network access may serve as a temporary workaround for CVE-2018-1069.