CVE-2014-8177

MEDIUM

Red Hat Gluster Storage Management Console - Authenticated Improper Access Control via Multiple Crafted Requests

Title source: llm

Description

The Red Hat gluster-swift package, as used in Red Hat Gluster Storage (formerly Red Hat Storage Server), allows remote authenticated users to bypass the max_meta_count constraint via multiple crafted requests which exceed the limit when combined.

References (4)

Core 4

Core References

Vendor Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2015-1845.html

Issue Tracking x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=1257525

Vendor Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2015-1846.html

Mailing List mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2015/08/27/5

Scores

CVSS v3 6.5

EPSS 0.0153

EPSS Percentile 71.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Details

CWE

CWE-284

Status published

Products (3)

redhat/gluster_storage_management_console 3.1

redhat/gluster_storage_server 3.1

redhat/storage_native_client

Published Jun 07, 2016

Tracked Since Feb 18, 2026