Read the docs
Red Hat Security Advisory

RHSA-2016:2995

Red Hat Ceph Storage 1.3 security and bug fix update

Released 2016-12-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

TI-2016-07801 CVE-2016-9579 · GHSA-2594-xrq4-4jm3

Improper input validation in Red Hat ceph

Priority MEDIUM 40

A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0434 Published 2018-08-01 Fixed CWE-20