Red Hat Security AdvisoryRHSA-2021:1518
Red Hat Ceph Storage 3.3 Security and Bug Fix Update
Released 2021-05-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 3 MON - ELS ceph-2:12.2.12-139.el7cp, ceph-base-2:12.2.12-139.el7cp, ceph-common-2:12.2.12-139.el7cp +17
- Red Hat Ceph Storage 3 OSD - ELS ceph-2:12.2.12-139.el7cp, ceph-base-2:12.2.12-139.el7cp, ceph-common-2:12.2.12-139.el7cp +16
- Red Hat Ceph Storage 3 Tools - ELS ceph-2:12.2.12-139.el7cp, ceph-ansible-3.2.56-1.el7cp, ceph-base-2:12.2.12-139.el7cp +23
Fixes 4 records
Priority HIGH 81
The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.99856 · Published 2020-06-03 · Partial fix · 6.7.4, 7.0.2 CWE-918
Priority MEDIUM 40
In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check for transport-layer restrictions, allowing remote attackers to read or write files via directory tra…
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.02681 · Published 2021-01-13 · Partial fix CWE-22
Priority LOW 38
An issue was discovered in Ceph through 13.2.9.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02443 · Published 2020-04-22 · Fixed CWE-476
Priority LOW 31
User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00295 · Published 2020-12-18 · Partial fix CWE-522
THREATIST.IORead the docs