VULNERABILITY INTELLIGENCE

CVE-2018-1088

CVSS score8.1 HIGH
EPSS probability5.49%
CISA KEVNot currently listed
Published2018-04-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.

Weakness classification

  • CWE-266: Incorrect Privilege Assignment

Primary references