cvedb.io
CVE-2018-1088
HIGH · CVSS 8.1
EPSS exploitation probability: 0%
Published 2018-04-18T16:29:00.323 · Last modified 2026-06-17T01:50:27.213

Summary

A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.

Affected products

redhat — gluster_storage

Does this affect you?

Add your gear to cvedb and we'll alert you only when redhat ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.