REDHAT-BUG-1582043: High severity centos glusterfs vulnerability
A flaw was found in glusterfs which can lead to privilege escalation on gluster server nodes.
It was found that any gluster client authenticated via TLS could use gluster cli with --remote-host command to add itself to gluster trusted pool and perform all gluster operations like peer probe itself or other machines, start, stop, delete volumes etc.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1582043?
The severity of REDHAT-BUG-1582043 is considered high due to its potential for privilege escalation.
How do I fix REDHAT-BUG-1582043?
To fix REDHAT-BUG-1582043, ensure you apply the relevant security updates provided by Red Hat for glusterfs.
Who is affected by REDHAT-BUG-1582043?
Users running glusterfs that allow authenticated TLS clients to connect are affected by REDHAT-BUG-1582043.
What versions of glusterfs are impacted by REDHAT-BUG-1582043?
REDHAT-BUG-1582043 affects all versions of glusterfs that do not contain the necessary security patches.
Can unauthorized clients exploit REDHAT-BUG-1582043?
Yes, unauthorized clients could potentially exploit REDHAT-BUG-1582043 if they gain access to a client authenticated via TLS.