Ceph (Linuxfoundation) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 52 known versions, newest CVE from 2022-07-25. Vendor: Linuxfoundation.

CVEs of Ceph

• CVE-2022-0670 - CVSS 9.1 (critical), 2022-07-25: A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The…
• CVE-2021-20288 - CVSS 7.2 (high), 2021-04-15: An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitize…
• CVE-2020-10753 - CVSS 6.5 (medium), 2020-06-26: A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS…
• CVE-2020-10736 - CVSS 8 (high), 2020-06-22: An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict…
• CVE-2020-1760 - CVSS 6.1 (medium), 2020-04-23: A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks…
• CVE-2020-12059 - CVSS 7.5 (high), 2020-04-22: An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.
• CVE-2020-1699 - CVSS 7.5 (high), 2020-04-21: A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in…
• CVE-2020-1759 - CVSS 6.8 (medium), 2020-04-13: A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the…