CVE-2018-1112

8.8 highEPSS 2.3%

High (8.8) in gluster glusterfs. EPSS 2.3% chance of exploitation in the next 30 days.

glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2018-04-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gluster:glusterfs

References

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html
https://access.redhat.com/articles/3422521
https://access.redhat.com/errata/RHSA-2018:1268
https://access.redhat.com/errata/RHSA-2018:1269
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1112

Check your stack JSON