Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: backstage Component: Ceph Clear all filters
TI-2022-00585 CVE-2022-0670 · GHSA-g5mr-95rv-q4hc

Incorrect authorization in Ceph

Priority MEDIUM 42

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0128 Published 2022-07-25 Partial fix CWE-863
TI-2021-03578 CVE-2021-20288 · GHSA-39jx-6759-44c6

Improper authentication in ceph

Priority LOW 36

An authentication flaw was found in ceph in versions before 14.2.20.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0211 Published 2021-04-15 Partial fix CWE-287
TI-2020-08650 CVE-2020-10753 · GHSA-cggp-94xr-prm6

HTTP response splitting in Red Hat Ceph Storage

Priority LOW 32

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway).

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0145 Published 2020-06-26 Partial fix CWE-113
TI-2020-08635 CVE-2020-10736 · GHSA-7hf6-hcxg-35gw

Improper authorization in [UNKNOWN] ceph

Priority LOW 36

An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00646 Published 2020-06-22 Fixed in 15.2.2 CWE-285
TI-2020-01703 CVE-2020-1760 · GHSA-gj74-48rr-85f7

Cross-site scripting in [UNKNOWN] ceph

Priority LOW 30

A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01557 Published 2020-04-23 Partial fix CWE-79
TI-2020-01646 CVE-2020-1699 · GHSA-c7h3-g28j-x6jq

Information disclosure in ceph

Priority LOW 37

A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions 14.2.7 and 15.1.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02144 Published 2020-04-21 No fix listed CWE-200
TI-2020-01702 CVE-2020-1759 · GHSA-hcpq-vw4g-3vmh

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container…

Priority LOW 33

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attack…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.01625 Published 2020-04-13 Partial fix CWE-323