Red Hat Security Advisory

RHSA-2022:5997

Red Hat Ceph Storage Security, Bug Fix, and Enhancement Update

Released 2022-08-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Ceph Storage 5.2 MON ceph-2:16.2.8-84.el8cp, ceph-2:16.2.8-84.el9cp, ceph-base-2:16.2.8-84.el8cp +47
Red Hat Ceph Storage 5.2 OSD ceph-2:16.2.8-84.el8cp, ceph-2:16.2.8-84.el9cp, ceph-base-2:16.2.8-84.el8cp +43
Red Hat Ceph Storage 5.2 Tools ceph-2:16.2.8-84.el8cp, ceph-2:16.2.8-84.el9cp, ceph-base-2:16.2.8-84.el8cp +47

Fixes 1 record

TI-2022-00585 CVE-2022-0670 · GHSA-g5mr-95rv-q4hc

Incorrect authorization in Ceph

MEDIUM 42

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0128 Published 2022-07-25 Partial fix CWE-863