Skip to content
OpenAdvisories
Critical RHSA-2018:3829 1 CVE

Red Hat Security Advisory: RHGS WA security and bug fix update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · Gluster Storage 3 storage:3.4:na:el7 tendrl-gluster-integration 0:1.6.3-13.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:na:el7 tendrl-node-agent 0:1.6.3-11.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 grafana 0:4.6.4-1.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 tendrl-ansible 0:1.6.3-10.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 tendrl-api 0:1.6.3-8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 tendrl-api-httpd 0:1.6.3-8.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 tendrl-grafana-plugins 0:1.6.3-16.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 tendrl-monitoring-integration 0:1.6.3-16.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 tendrl-node-agent 0:1.6.3-11.el7rhgs
Red Hat · Gluster Storage 3 storage:3.4:wa:el7 tendrl-ui 0:1.6.3-14.el7rhgs

Vulnerabilities 1

  • Critical 9.8
    CVE-2018-15727 Public exploit EPSS 63%

    Grafana Authentication Bypass

    Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.

    grafana github.com/grafana/grafana Ubuntu Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1599291
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1610668
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1611991
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1624088
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1627651
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1627988
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1629520
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1630344
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1641413
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1642574
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1650557
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1656057
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1656064
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3829.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-15727
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-15727
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-15727