gluster glusterfs CVE-2018-10913 vulnerability in Gluster and Other Products
Published on September 4, 2018

product logo product logo product logo product logo
An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via glusterfs FUSE to determine the existence of any file.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Weakness Type

Generation of Error Message Containing Sensitive Information

The software generates an error message that includes sensitive information about its environment, users, or associated data.


Products Associated with CVE-2018-10913

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-10913 are published in these products:

Glusterfs
Red Hat Virtualization Host
Debian Linux
Red Hat Enterprise Linux Server
Red Hat Virtualization
OpenSuse Leap

Affected Versions

Red Hat glusterfs Version n/a is affected by CVE-2018-10913

Exploit Probability

EPSS
1.96%
Percentile
80.55%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.