CVE-2022-0670

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

Score

CVSS 3.1 9.1 Critical

Status

Modified - secalert@redhat.com

Published

2022-07-25

Last modified

2024-08-02

Weaknesses

CWE-863

Affected products

• Fedora (Fedoraproject)
• Ceph (Linuxfoundation)
• Ceph Storage (Redhat)

References

• https://ceph.io/en/news/blog/2022/v17-2-2-quincy-released/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5O3XMDFZWA2FWU6GAYOVSF…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TIRTTRG5O4YP2TNGDCDOHI…