Red Hat Security Advisory

RHSA-2022:1394

Red Hat Ceph Storage 3 Security and Bug Fix update

Released 2022-04-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ceph Storage 3 MON - ELS ceph-2:12.2.12-141.el7cp, ceph-base-2:12.2.12-141.el7cp, ceph-common-2:12.2.12-141.el7cp +17
Red Hat Ceph Storage 3 OSD - ELS ceph-2:12.2.12-141.el7cp, ceph-base-2:12.2.12-141.el7cp, ceph-common-2:12.2.12-141.el7cp +16
Red Hat Ceph Storage 3 Tools - ELS ceph-2:12.2.12-141.el7cp, ceph-base-2:12.2.12-141.el7cp, ceph-common-2:12.2.12-141.el7cp +18

TI-2021-03578 CVE-2021-20288 · GHSA-39jx-6759-44c6

LOW 36

An authentication flaw was found in ceph in versions before 14.2.20.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0211 Published 2021-04-15 Partial fix CWE-287