Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:gluster_storage:3.0:*:*:*:*:*:*:*

part: a version: 3.0 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductGluster Storage (02809ad3-04e7-5b64-b63e-d7ed211a2895)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-25717 vulnerable 2026-06-08 05:23:49.174145 Details available
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.
Published: 2022-02-18T00:00:00.000Z
Updated: 2024-08-04T15:40:36.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10763 vulnerable 2026-06-08 05:16:35.856209 Details available
An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read potentially sensitive information such as gluster-block passwords.
Published: 2020-11-24T16:17:23.000Z
Updated: 2024-08-04T11:14:15.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3880 vulnerable 2026-06-08 05:13:56.277146 Details available
MEDIUM (4.2)
A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.
Published: 2019-04-09T15:18:08.000Z
Updated: 2024-08-04T19:19:18.589Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3831 vulnerable 2026-06-08 05:13:56.151570 Details available
MEDIUM (6.4)
A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.
Published: 2019-03-25T17:12:10.000Z
Updated: 2024-08-04T19:19:18.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10928 vulnerable 2026-06-08 05:10:37.392150 Details available
HIGH (8.8)
A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume. An authenticated attacker could use this flaw to create arbitrary symlinks pointing anywhere on the server and execute arbitrary code on glusterfs server nodes.
Published: 2018-09-04T15:00:00.000Z
Updated: 2024-08-05T07:54:36.029Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000808 vulnerable 2026-06-08 05:10:25.985375 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12163 vulnerable 2026-06-08 05:08:45.423069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12150 vulnerable 2026-06-08 05:08:45.373794 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2125 vulnerable 2026-06-08 05:07:33.348374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2124 vulnerable 2026-06-08 05:07:33.321412 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.