Red Hat Security AdvisoryRHSA-2015:1092
ceph-deploy security update
Released 2015-06-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Ceph Storage Installer 1.2 ceph-deploy-1.5.22-0.4.rc1.el6cp, ceph-deploy-1.5.22-0.4.rc1.el7cp
Fixes 2 records
Priority LOW 11
The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00383 · Published 2015-06-08 · Partial fix · 1.5.25 CWE-200
Priority LOW 11
ceph-deploy before 1.5.23 uses weak permissions (644) for ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00376 · Published 2015-06-16 · Partial fix · 1.5.23 CWE-200
