TI-2018-07675 CVE-2018-10861 · GHSA-58jc-hvg4-pxxm
Improper authorization in Red Hat ceph
Priority MEDIUM 41
A flaw was found in the way ceph mon handles user requests.
RHSA-2018:2261
Red Hat Ceph Storage 2.5 security, enhancement, and bug fix update
Released 2018-07-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- 7Client-RHCEPH-2.5-Client-Tools ceph-2:10.2.10-28.el7cp, ceph-ansible-3.0.39-1.el7cp, ceph-base-2:10.2.10-28.el7cp +17
- 7ComputeNode-RHCEPH-2.5-ComputeNode-Tools ceph-2:10.2.10-28.el7cp, ceph-ansible-3.0.39-1.el7cp, ceph-base-2:10.2.10-28.el7cp +17
- 7Server-RHCEPH-2.5-MON ceph-2:10.2.10-28.el7cp, ceph-base-2:10.2.10-28.el7cp, ceph-common-2:10.2.10-28.el7cp +14
- 7Server-RHCEPH-2.5-OSD ceph-2:10.2.10-28.el7cp, ceph-base-2:10.2.10-28.el7cp, ceph-common-2:10.2.10-28.el7cp +14
- 7Server-RHCEPH-2.5-Server-Tools ceph-2:10.2.10-28.el7cp, ceph-ansible-3.0.39-1.el7cp, ceph-base-2:10.2.10-28.el7cp +17
- 7Workstation-RHCEPH-2.5-Workstation-Tools ceph-2:10.2.10-28.el7cp, ceph-ansible-3.0.39-1.el7cp, ceph-base-2:10.2.10-28.el7cp +17
Fixes 3 records
TI-2018-01045 CVE-2018-1128 · GHSA-xw3f-9qfw-v43f
Authentication bypass by capture-replay in Red Hat ceph
Priority LOW 36
It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack.
TI-2018-01046 CVE-2018-1129 · GHSA-7qc9-w55v-w7p3
Improper access control in Red Hat ceph
Priority LOW 33
A flaw was found in the way signature calculation was handled by cephx authentication protocol.