Every CVE Search/ Get API key

CVE-2016-7031

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows...

7.5 HighFix available

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

1.75%Up 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.

Record
CVE-2016-7031
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-200, CWE-254
Updated
2026-11-02
CVE List No score

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.

Record
CVE-2016-7031
Updated
2026-11-02
EUVDEUVD-2016-7916 No score

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.

Record
EUVD-2016-7916
Updated
2026-11-03
GitHub AdvisoriesGHSA-cfww-rhhj-3fwm 7.5

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows...

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.

Record
GHSA-cfww-rhhj-3fwm
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
OSV 7.5

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.

Record
CVE-2016-7031
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2016-7031 7.5

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.

Record
DEBIAN-CVE-2016-7031
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2016:1972 3.0

Red Hat Security Advisory: Red Hat Ceph Storage 1.3.3 security, bug fix, and enhancement update

Record
RHSA-2016:1972
CVSS 3.0
3.0 LowCVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2016-7031 7.5

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.

Record
UBUNTU-CVE-2016-7031
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVUSN-3452-1 No score

ceph vulnerabilities

It was discovered that Ceph incorrectly handled the handle_command function. A remote authenticated user could use this issue to cause Ceph to crash, resulting in a denial of service. (CVE-2016-5009)

Rahul Aggarwal discovered that Ceph incorrectly handled the authenticated-read ACL. A remote attacker could possibly use this issue to list bucket contents via a URL. (CVE-2016-7031)

Diluga Salome discovered that Ceph incorrectly handled certain POST objects with null conditions. A remote attacker could possibly use this issue to cuase Ceph to crash, resulting in a denial of service. (CVE-2016-8626)

Yang Liu discovered that Ceph incorrectly handled invalid HTTP Origin headers. A remote attacker could possibly use this issue to cuase Ceph to crash, resulting in a denial of service. (CVE-2016-9579)

Record
USN-3452-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ceph
Debian:12
 before 10.2.5-1
10.2.5-1
ceph
Debian:13
 before 10.2.5-1
10.2.5-1
ceph
Debian:14
 before 10.2.5-1
10.2.5-1
ceph
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-3.el7cp
1:0.94.9-3.el7cp
ceph-common
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-3.el7cp
1:0.94.9-3.el7cp
ceph-debuginfo
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-3.el7cp
1:0.94.9-3.el7cp
ceph-radosgw
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-3.el7cp
1:0.94.9-3.el7cp
ceph-selinux
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-3.el7cp
1:0.94.9-3.el7cp
librados2
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-3.el7cp
1:0.94.9-3.el7cp
librados2-devel
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-3.el7cp
1:0.94.9-3.el7cp
Show 11 moreShow less
Affected packages
PackageAffectedFixed
librbd1
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-3.el7cp
1:0.94.9-3.el7cp
librbd1-devel
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-3.el7cp
1:0.94.9-3.el7cp
python-rados
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-3.el7cp
1:0.94.9-3.el7cp
python-rbd
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-3.el7cp
1:0.94.9-3.el7cp
radosgw-agent
Red Hat:ceph_storage:1.3::el7
 before 0:1.2.7-1.el7cp
0:1.2.7-1.el7cp
calamari-server
Red Hat:ceph_storage:1.3::el7
 before 0:1.3.3-2.el7cp
0:1.3.3-2.el7cp
ceph-deploy
Red Hat:ceph_storage:1.3::el7
 before 0:1.5.36-1.el7cp
0:1.5.36-1.el7cp
ceph-mon
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-3.el7cp
1:0.94.9-3.el7cp
ceph-test
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-3.el7cp
1:0.94.9-3.el7cp
ceph-osd
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-3.el7cp
1:0.94.9-3.el7cp
ceph
Ubuntu:14.04:LTS
 before 0.80.11-0ubuntu1.14.04.3, plus listed versions
0.67.4-0ubuntu20.67.4-0ubuntu30.72-0ubuntu10.72.1-0ubuntu10.72.1-2
Show 16 moreShow less
0.72.1-30.72.2-10.72.2-20.78-0ubuntu10.79-0ubuntu10.80.1-0ubuntu10.80.1-0ubuntu1.10.80.5-0ubuntu0.14.04.10.80.7-0ubuntu0.14.04.10.80.9-0ubuntu0.14.04.10.80.9-0ubuntu0.14.04.20.80.10-0ubuntu0.14.04.10.80.10-0ubuntu1.14.04.20.80.10-0ubuntu1.14.04.30.80.11-0ubuntu1.14.04.10.80.11-0ubuntu1.14.04.2
0.80.11-0ubuntu1.14.04.3

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-7031 is a high vulnerability (CVSS 7.5) in Ceph Project Ceph, published October 3, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.75%, the 77th percentile. Fixed in ceph 10.2.5-1.

References

Show 44 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open