TI-2018-10512 CVE-2018-14649 · GHSA-vq9p-965j-5xf8
Command injection in [UNKNOWN] ceph-iscsi-cli
Priority MEDIUM 56
It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode.
RHSA-2018:2838
ceph-iscsi-cli security update
Released 2018-10-01 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 3.1 Tools ceph-iscsi-cli-2.7-7.el7cp