Red Hat Ceph 16.0.0

CPE Details

Red Hat Ceph 16.0.0
redhat
ceph
16.0.0
2021-05-27
23h54 +00:00
2021-06-03
13h35 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:redhat:ceph:16.0.0:*:*:*:*:*:*:*

Informations

Vendor

redhat

Product

ceph

Version

16.0.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2020-25678 2021-01-08 17h59 +00:00 A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by searching the mgr logs for grafana and dashboard, with passwords visible.
4.4
Moyen
CVE-2020-27781 2020-12-17 23h00 +00:00 User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation. An Open Stack Manila user can request access to a share to an arbitrary cephx user, including existing users. The access key is retrieved via the interface drivers. Then, all users of the requesting OpenStack project can view the access key. This enables the attacker to target any resource that the user has access to. This can be done to even "admin" users, compromising the ceph administrator. This flaw affects Ceph versions prior to 14.2.16, 15.x prior to 15.2.8, and 16.x prior to 16.2.0.
7.1
Haute