Red Hat Security AdvisoryRHSA-2015:1631
ceph-deploy security update
Released 2015-08-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 1.2 for CentOS
Fixes 2 records
Priority LOW 11
The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00383 · Published 2015-06-08 · Partial fix · 1.5.25 CWE-200
Priority LOW 11
ceph-deploy before 1.5.23 uses weak permissions (644) for ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00376 · Published 2015-06-16 · Partial fix · 1.5.23 CWE-200
