CVE-2018-1127 Auth bypass in Red Hat Gluster Storage
Attackers can replay session tokens after logout to authenticate as the target user in Red Hat Gluster Storage.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2018-1127?
CVE-2018-1127 is a medium-severity authentication bypass vulnerability in Red Hat Gluster Storage, published on 11 Sep 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out. Session tokens remain active for a few minutes allowing attackers to replay tokens acquired via sniffing/MITM attacks and authenticate as the target user.
Which versions are affected by CVE-2018-1127?
It affects 1 product.
Linux distribution packages (15)
tendrl-commons Red Hat:storage:3.4:na:el7 | All versions | 0:1.6.3-12.el7rhgs |
tendrl-gluster-integration Red Hat:storage:3.4:na:el7 | All versions | 0:1.6.3-10.el7rhgs |
tendrl-node-agent Red Hat:storage:3.4:na:el7 | All versions | 0:1.6.3-10.el7rhgs |
python-flask Red Hat:storage:3.4:wa:el7 | All versions | 1:0.10.1-5.el7rhgs |
python-flask-doc Red Hat:storage:3.4:wa:el7 | All versions | 1:0.10.1-5.el7rhgs |
python-itsdangerous Red Hat:storage:3.4:wa:el7 | All versions | 0:0.23-2.el7 |
tendrl-ansible Red Hat:storage:3.4:wa:el7 | All versions | 0:1.6.3-7.el7rhgs |
tendrl-api Red Hat:storage:3.4:wa:el7 | All versions | 0:1.6.3-5.el7rhgs |
tendrl-api-httpd Red Hat:storage:3.4:wa:el7 | All versions | 0:1.6.3-5.el7rhgs |
tendrl-commons Red Hat:storage:3.4:wa:el7 | All versions | 0:1.6.3-12.el7rhgs |
tendrl-grafana-plugins Red Hat:storage:3.4:wa:el7 | All versions | 0:1.6.3-11.el7rhgs |
tendrl-monitoring-integration Red Hat:storage:3.4:wa:el7 | All versions | 0:1.6.3-11.el7rhgs |
tendrl-node-agent Red Hat:storage:3.4:wa:el7 | All versions | 0:1.6.3-10.el7rhgs |
tendrl-notifier Red Hat:storage:3.4:wa:el7 | All versions | 0:1.6.3-4.el7rhgs |
tendrl-ui Red Hat:storage:3.4:wa:el7 | All versions | 0:1.6.3-11.el7rhgs |
Products include Redhat Gluster Storage.
How do I fix CVE-2018-1127?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2018-1127 being exploited?
There is no known exploitation of CVE-2018-1127 in the wild and no public exploit code.
Other vulnerabilities in Red Hat Gluster Storage
Sources
Also known as GHSA-jwq3-h8rx-wcwj, RHSA-2018:2616.