Red Hat Security Advisory

RHSA-2021:2445

Red Hat Ceph Storage 4.2 Security and Bug Fix Update

Released 2021-06-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ceph Storage 4.2 MON ceph-2:14.2.11-181.el7cp, ceph-2:14.2.11-181.el8cp, ceph-base-2:14.2.11-181.el7cp +47
Red Hat Ceph Storage 4.2 OSD ceph-2:14.2.11-181.el7cp, ceph-2:14.2.11-181.el8cp, ceph-base-2:14.2.11-181.el7cp +39
Red Hat Ceph Storage 4.2 Tools ceph-2:14.2.11-181.el7cp, ceph-2:14.2.11-181.el8cp, ceph-base-2:14.2.11-181.el7cp +47

TI-2021-03578 CVE-2021-20288 · GHSA-39jx-6759-44c6

LOW 36

An authentication flaw was found in ceph in versions before 14.2.20.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0211 Published 2021-04-15 Partial fix CWE-287

TI-2021-02468 CVE-2021-3509 · GHSA-g9cr-7jh8-qrmx

LOW 31

A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.017 Published 2021-05-26 Partial fix CWE-79

TI-2020-16909 CVE-2020-27839 · GHSA-2c8x-3ppx-9gj3

LOW 29

A flaw was found in ceph-dashboard.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02449 Published 2021-05-26 Partial fix CWE-522