Red Hat Gluster Storage vulnerabilities

1 known vulnerability affecting red_hat/red_hat_gluster_storage.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2018-1127HIGHCVSS 8.1v3.4.02018-09-11

CVE-2018-1127 [MEDIUM] CWE-613 CVE-2018-1127: Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out. Session tokens remain active for a few minutes allowing attackers to replay tokens acquired via sniffing/MITM attacks and authenticate as the target user.