Red Hat Storage Server vulnerabilities

2 CVEs affecting Red Hat Storage Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-4157, published 2013-10-04.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-4157, published 2013-10-04. Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days. Red Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the (1) e, (2) local-bricks.list, (3) bricks.err, or (4) limits.conf files in /tmp.
• CVE-2012-5635, published 2013-04-09. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files…