Every CVE Search/ Get API key

CVE-2020-25677

Ceph-ansible 4.0.34.1 creates /etc/ceph/iscsi-gateway.conf with insecure default permissions,...

5.5 MediumFix available

CVE-2020-25677 is a medium vulnerability (CVSS 5.5) in Ceph Ceph-ansible, published December 8, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 11th percentile. Fixed in ceph 2:14.2.11-95.el7cp.

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.21%Down 0.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.5

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.

Record
CVE-2020-25677
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-312
Updated
2026-11-02
CVE List No score

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.

Record
CVE-2020-25677
Weakness
CWE-312
Updated
2026-11-02
EUVDEUVD-2020-18339 No score

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.

Record
EUVD-2020-18339
Updated
2026-11-03
GitHub AdvisoriesGHSA-637g-65xr-xr73 No score

Ceph-ansible 4.0.34.1 creates /etc/ceph/iscsi-gateway.conf with insecure default permissions,...

Ceph-ansible 4.0.34.1 creates /etc/ceph/iscsi-gateway.conf with insecure default permissions, allowing any user to read the sensitive information within.

Record
GHSA-637g-65xr-xr73
Weakness
CWE-312
Updated
2026-11-02
OSV 5.5

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.

Record
CVE-2020-25677
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2021:0081 8.8

Red Hat Security Advisory: Red Hat Ceph Storage 4.2 Security and Bug Fix update

Record
RHSA-2021:0081
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ceph
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
ceph-base
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
ceph-common
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
ceph-debuginfo
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
ceph-grafana-dashboards
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
ceph-mgr
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
ceph-mgr-dashboard
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
ceph-mgr-diskprediction-local
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
ceph-mgr-k8sevents
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
ceph-mgr-rook
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
Show 82 moreShow less
Affected packages
PackageAffectedFixed
ceph-mon
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
ceph-selinux
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
ceph-test
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
libcephfs-devel
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
libcephfs2
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
librados-devel
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
librados2
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
libradospp-devel
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
libradosstriper1
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
librbd-devel
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
librbd1
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
librgw-devel
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
librgw2
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
python-ceph-argparse
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
python-cephfs
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
python-rados
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
python-rbd
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
python-rgw
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
ceph-osd
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
ceph-fuse
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
ceph-mds
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
ceph-radosgw
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
rbd-mirror
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
rbd-nbd
Red Hat:ceph_storage:4::el7
 before 2:14.2.11-95.el7cp
2:14.2.11-95.el7cp
ceph
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-base
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-base-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-common
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-common-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-debugsource
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-fuse-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-grafana-dashboards
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-mds-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-mgr
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-mgr-dashboard
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-mgr-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-mgr-diskprediction-local
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-mgr-k8sevents
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-mgr-rook
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-mon
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-mon-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-osd-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-radosgw-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-selinux
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-test
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-test-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
libcephfs-devel
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
libcephfs2
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
libcephfs2-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
librados-devel
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
librados-devel-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
librados2
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
librados2-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
libradospp-devel
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
libradosstriper1
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
libradosstriper1-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
librbd-devel
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
librbd1
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
librbd1-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
librgw-devel
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
librgw2
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
librgw2-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
python3-ceph-argparse
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
python3-cephfs
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
python3-cephfs-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
python3-rados
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
python3-rados-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
python3-rbd
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
python3-rbd-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
python3-rgw
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
python3-rgw-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
rbd-fuse-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
rbd-mirror-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
rbd-nbd-debuginfo
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-osd
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-fuse
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-mds
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-radosgw
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
rbd-mirror
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
rbd-nbd
Red Hat:ceph_storage:4::el8
 before 2:14.2.11-95.el8cp
2:14.2.11-95.el8cp
ceph-ansible
Red Hat:ceph_storage:4::el7
 before 0:4.0.41-1.el7cp
0:4.0.41-1.el7cp
ceph-ansible
Red Hat:ceph_storage:4::el8
 before 0:4.0.41-1.el8cp
0:4.0.41-1.el8cp

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 125 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open