VULNERABILITY INTELLIGENCE

CVE-2018-1069

CVSS score7.1 HIGH

EPSS probability0.58%

CISA KEVNot currently listed

Published2018-03-09

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Red Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container network filesystems. An attacker could override the UserId and GroupId for GlusterFS and NFS to read and write any data on the network filesystem.

Weakness classification

CWE-284: Improper Access Control
CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references

secalert@redhat.com — Third Party Advisory, VDB Entry
secalert@redhat.com — Issue Tracking, Mitigation
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Mitigation