Red Hat Security Advisory

RHSA-2020:2231

Red Hat Ceph Storage 4.1 security, bug fix, and enhancement update

Released 2020-05-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ceph Storage 4.1 Tools ceph-ansible-4.0.23-1.el7cp, ceph-ansible-4.0.23-1.el8cp

Fixes 1 record

TI-2020-01660 CVE-2020-1716 · GHSA-v27v-7hmw-76p2

Hard-coded credentials in ceph-ansible

MEDIUM 41

A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01269 Published 2021-05-28 Partial fix CWE-798