https://bugzilla.redhat.com/show_bug.cgi?id=1510968
Siddharth Sharma <sisharma(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|71016,reported=20171016,sou |71016,reported=20171016,sou
|rce=internet,cvss3=7.4/CVSS |rce=internet,cvss3=7.4/CVSS
|:3.0/AV:N/AC:H/PR:N/UI:N/S: |:3.0/AV:N/AC:H/PR:N/UI:N/S:
|U/C:H/I:H/A:N,cwe=CWE-592,f |U/C:H/I:H/A:N,cwe=CWE-592,f
|edora-all/spring-ldap=affec |edora-all/spring-ldap=affec
|ted,fuse-6/Camel=affected,r |ted,fuse-6/Camel=affected,r
|hes-3/spring-ldap-core=affe |hes-3/spring-ldap-core=wont
|cted |fix/impact=low
--- Comment #5 from Siddharth Sharma <sisharma(a)redhat.com> ---
Analysis:
Red Hat Gluster Storage 3 ships rhevm-dependencies which contains affected code
but instead of DefaultTlsDirContextAuthenticationStrategy code uses
SimpleDirContextAuthenticationStrategy. Impact of this flaw is low for Red Hat
Gluster Storage 3.
--
You are receiving this mail because:
You are on the CC list for the bug.