Ceph Storage Mon (Redhat) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2018-08-01. Vendor: Redhat.

CVEs of Ceph Storage Mon

• CVE-2016-9579 - CVSS 7.5 (high), 2018-08-01: A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote…
• CVE-2018-1129 - CVSS 6.5 (medium), 2018-07-10: A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able…
• CVE-2018-1128 - CVSS 7.5 (high), 2018-07-10: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph…
• CVE-2018-10861 - CVSS 8.1 (high), 2018-07-10: A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and…
• CVE-2016-5009 - CVSS 6.5 (medium), 2016-07-12: The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor…