3.5
Faible
CVE-2018-14662 It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt…
Description
It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ceph | 13.2.4 | Pas de correctif indiqué |
Autres CVE de ceph
Les 7 CVE de ceph →
CVE-2020-10736
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr…
8.0
Élevée
CVE-2020-1760
A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3
5.8
Moyenne
CVE-2020-1700
A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects
6.5
Moyenne
CVE-2019-3821
A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled
7.5
Élevée