Red Hat Security AdvisoryRHSA-2016:2994
Red Hat Ceph Storage 1.3 security update
Released 2016-12-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Ceph Storage MON 1.3 ceph-1:0.94.9-9.el7cp, ceph-common-1:0.94.9-9.el7cp, ceph-mon-1:0.94.9-9.el7cp +8
- Red Hat Ceph Storage OSD 1.3 ceph-1:0.94.9-9.el7cp, ceph-common-1:0.94.9-9.el7cp, ceph-osd-1:0.94.9-9.el7cp +8
- Red Hat Ceph Storage Tools 1.3 ceph-1:0.94.9-9.el7cp, ceph-common-1:0.94.9-9.el7cp, ceph-radosgw-1:0.94.9-9.el7cp +7
Fixes 1 record
Priority MEDIUM 40
A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0434 · Published 2018-08-01 · Fixed CWE-20
