Read the docs

The Ceph Project

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

The Ceph Project records in CISA KEV

No The Ceph Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ceph 1 record LOW

Records

5 records

TI-2019-07542 CVE-2019-10222 · GHSA-vr4v-h7xq-hwc6

Improper handling of exceptional conditions in ceph

Priority MEDIUM 40

A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04524 Published 2019-11-08 Fixed CWE-755
TI-2020-01646 CVE-2020-1699 · GHSA-c7h3-g28j-x6jq

Information disclosure in ceph

Priority LOW 37

A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions 14.2.7 and 15.1.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02144 Published 2020-04-21 No fix listed CWE-200
TI-2018-12099 CVE-2018-16889 · GHSA-2xfm-mgc4-j8fx

Sensitive information in log files in ceph

Priority LOW 34

Ceph does not properly sanitize encryption keys in debug logging for v4 auth.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00536 Published 2019-01-28 Fixed CWE-532
TI-2020-01702 CVE-2020-1759 · GHSA-hcpq-vw4g-3vmh

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container…

Priority LOW 33

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attack…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.01625 Published 2020-04-13 Partial fix CWE-323
Open these records in search →