Red Hat Security AdvisoryRHSA-2021:1452
Red Hat Ceph Storage security, bug fix, and enhancement Update
Released 2021-04-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 4.2 MON ceph-2:14.2.11-147.el7cp, ceph-2:14.2.11-147.el8cp, ceph-base-2:14.2.11-147.el7cp +47
- Red Hat Ceph Storage 4.2 OSD ceph-2:14.2.11-147.el7cp, ceph-2:14.2.11-147.el8cp, ceph-base-2:14.2.11-147.el7cp +41
- Red Hat Ceph Storage 4.2 Tools ceph-2:14.2.11-147.el7cp, ceph-2:14.2.11-147.el8cp, ceph-ansible-4.0.49.2-1.el7cp +47
Fixes 2 records
Priority MEDIUM 40
In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check for transport-layer restrictions, allowing remote attackers to read or write files via directory tra…
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.02681 · Published 2021-01-13 · Partial fix CWE-22
Priority LOW 20
A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00256 · Published 2021-01-08 · Partial fix CWE-312
