CVSS 3.0
7.1 highCVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2018-1069
Red Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container network filesystems. An attacker could override the UserId and GroupId for GlusterFS and NFS to read and write any data on the network filesystem.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-732, CWE-284
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:openshift