Read the docs
Red Hat Security Advisory

RHSA-2016:2954

Red Hat Ceph Storage 2.1 security and bug fix update

Released 2016-12-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

TI-2016-07801 CVE-2016-9579 · GHSA-2594-xrq4-4jm3

Improper input validation in Red Hat ceph

Priority MEDIUM 40

A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0434 Published 2018-08-01 Fixed CWE-20