CPE Details
Linux Foundation Ceph 15.2.0
15.2.0
2020-05-04
16h21 +00:00
16h21 +00:00
2020-05-04
16h21 +00:00
16h21 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:linuxfoundation:ceph:15.2.0:*:*:*:*:*:*:*
Informations
Vendor
linuxfoundationProduct
cephVersion
15.2.0Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2. | 9.1 |
Critique |
||
| An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks. | 8 |
Haute |
