Red Hat Security AdvisoryRHSA-2024:0745
Red Hat Ceph Storage 5.3 Security update
Released 2024-02-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 5.3 MON ceph-2:16.2.10-248.el8cp, ceph-base-2:16.2.10-248.el8cp, ceph-common-2:16.2.10-248.el8cp +30
- Red Hat Ceph Storage 5.3 OSD ceph-2:16.2.10-248.el8cp, ceph-base-2:16.2.10-248.el8cp, ceph-common-2:16.2.10-248.el8cp +20
- Red Hat Ceph Storage 5.3 Tools ceph-2:16.2.10-248.el8cp, ceph-2:16.2.10-248.el9cp, ceph-ansible-6.0.28.7-1.el8cp +47
Fixes 2 records
Priority MEDIUM 48
IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03063 · Published 2024-05-13 · Partial fix CWE-1220
Priority LOW 30
IBM Storage Ceph 5.3z1, 5.3z5, and 6.1z1 could allow an authenticated user on the network to cause a denial of service from RGW.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00812 · Published 2024-02-02 · Fixed CWE-20
