Read the docs
TI-2020-08635 Aliases CVE-2020-10736GHSA-7hf6-hcxg-35gw

Improper authorization in [UNKNOWN] ceph

Priority LOW 36CWE-285Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-285.

Summary

An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.

Why it matters now

EPSS 0.00646 51st percentileScored 2026-11-07
Fix Fixed ceph ([UNKNOWN]): 15.2.2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
[UNKNOWN]ceph15.2.0 to before 15.2.215.2.2Patch availableCNA
  • ceph Vendor[UNKNOWN] Affected 15.2.0 to before 15.2.2 Fixed in 15.2.2 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:linuxfoundation:ceph:*:*:*:*:*:*:*:*15.2.0 to before 15.2.2Vulnerablebackstage
  • cpe:2.3:a:linuxfoundation:ceph:*:*:*:*:*:*:*:* Versions 15.2.0 to before 15.2.2 Vulnerable ·backstage

Remediation

  • Fix · CNA ceph ([UNKNOWN]) Fixed in 15.2.2

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

Not affected: 7 products
  • Red Hat Ceph Storage 2
  • Red Hat Ceph Storage 3
  • Red Hat Ceph Storage 4
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat OpenStack Platform 13 (Queens)
  • Red Hat OpenStack Platform 15 (Stein)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-10736
  2. 2026-10-03 Alias added: GHSA-7hf6-hcxg-35gw
  3. 2026-10-20 EPSS moved to the 50th–90th percentile

References

Advisory 2

  • TI-2022-00585 Incorrect authorization in Ceph CVSS 3.1CRITICAL 9.1
  • TI-2020-09714 An issue was discovered in Ceph through 13.2.9. CVSS 3.1HIGH 7.5
  • TI-2020-01646 Information disclosure in ceph CVSS 3.1HIGH 7.5
  • TI-2021-03578 Improper authentication in ceph CVSS 3.1HIGH 7.2
  • TI-2020-01702 A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container… CVSS 3.1MEDIUM 6.8
  • TI-2020-08650 HTTP response splitting in Red Hat Ceph Storage CVSS 3.1MEDIUM 6.5
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences