Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Red Hat ceph — DSA-4339 Clear all filters
TI-2018-07675 CVE-2018-10861 · GHSA-58jc-hvg4-pxxm

Improper authorization in Red Hat ceph

Priority MEDIUM 41

A flaw was found in the way ceph mon handles user requests.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.03181 Published 2018-07-10 Fixed CWE-285
TI-2018-01046 CVE-2018-1129 · GHSA-7qc9-w55v-w7p3

Improper access control in Red Hat ceph

Priority LOW 33

A flaw was found in the way signature calculation was handled by cephx authentication protocol.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01902 Published 2018-07-10 Partial fix CWE-284
TI-2018-01045 CVE-2018-1128 · GHSA-xw3f-9qfw-v43f

Authentication bypass by capture-replay in Red Hat ceph

Priority LOW 36

It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack.

CVSS 3.0HIGH 7.5 Adjacent network No auth No interaction EPSS 0.01386 Published 2018-07-10 Partial fix CWE-294