Read the docs

ceph

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

ceph records in CISA KEV

No ceph vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ceph 6 records MEDIUM Ceph-ansible 2 records MEDIUM Ceph-deploy 2 records LOW Civetweb 1 record LOW

Records

2 records in Ceph-ansible · all components

TI-2020-01660 CVE-2020-1716 · GHSA-v27v-7hmw-76p2

Hard-coded credentials in ceph-ansible

Priority MEDIUM 41

A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01269 Published 2021-05-28 Partial fix CWE-798
TI-2020-15694 CVE-2020-25677 · GHSA-637g-65xr-xr73

Cleartext storage of sensitive information in ceph-ansible

Priority LOW 24

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00213 Published 2020-12-08 Partial fix CWE-312
Open these records in search →