Information Disclosure in Red Hat Gluster Storage by Red Hat
CVE-2017-15087

7.5HIGH

Key Information:

Vendor
Red Hat
Status
Gluster Storage For Rhel 6
Vendor
CVE Published:
8 November 2017

Summary

A flaw was identified in the Red Hat Gluster Storage where the fix for a previously reported vulnerability was not properly applied in the erratum RHSA-2017:2858. This misimplementation exposes users to potential information disclosure risks, as the application fails to protect sensitive data adequately.

Affected Version(s)

Gluster Storage for RHEL 6 3.3

References

https://access.redhat.com/errata/RHSA-2017:3110
vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15087
x_refsource_CONFIRM
http://www.securityfocus.com/bid/101556
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.