Non notée
CVE-2020-25678 A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text
Description
A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by searching the mgr logs for grafana and dashboard, with passwords visible.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ceph | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- tracker.ceph.com tracker.ceph.com
- FEDORA-2021-93ff9e9103 lists.fedoraproject.org
- GLSA-202105-39 security.gentoo.org
- lists.debian.org lists.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de ceph
Les 10 CVE de ceph →
CVE-2022-3854
A flaw was found in Ceph, relating to the URL processing on RGW backends
6.5
Moyenne
CVE-2022-3650
A privilege escalation flaw was found in Ceph
Non notée
CVE-2021-3979
A key length flaw was found in Red Hat Ceph Storage
Non notée
CVE-2022-0670
A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any…
Non notée