Red Hat Security AdvisoryRHSA-2016:1972
Red Hat Ceph Storage 1.3.3 security, bug fix, and enhancement update
Released 2016-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Ceph Storage Calamari 1.3 calamari-server-1.3.3-2.el7cp
- Red Hat Ceph Storage Installer 1.3 ceph-deploy-1.5.36-1.el7cp
- Red Hat Ceph Storage MON 1.3 ceph-1:0.94.9-3.el7cp, ceph-common-1:0.94.9-3.el7cp, ceph-mon-1:0.94.9-3.el7cp +8
- Red Hat Ceph Storage OSD 1.3 ceph-1:0.94.9-3.el7cp, ceph-common-1:0.94.9-3.el7cp, ceph-osd-1:0.94.9-3.el7cp +8
- Red Hat Ceph Storage Tools 1.3 ceph-1:0.94.9-3.el7cp, ceph-common-1:0.94.9-3.el7cp, ceph-radosgw-1:0.94.9-3.el7cp +8
Fixes 1 record
Priority LOW 36
The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01751 · Published 2016-10-03 · Fixed CWE-200
