CVE-2020-10736
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the...
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.
- Record
CVE-2020-10736- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-285
- Updated
- 2026-11-02
EUVDEUVD-2020-3160
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.
- Record
EUVD-2020-3160- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7hf6-hcxg-35gw
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the...
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.
- Record
GHSA-7hf6-hcxg-35gw- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
NVD
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.
- Record
CVE-2020-10736- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 5.2 Medium
AV:A/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-285
- Updated
- 2026-11-02
OSVALPINE-CVE-2020-10736
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.
- Record
ALPINE-CVE-2020-10736- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.
- Record
CVE-2020-10736- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2020-10736
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.
- Record
UBUNTU-CVE-2020-10736- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVBIT-ceph-2020-10736 No score
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.
- Record
BIT-ceph-2020-10736- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10676-1 No score
ceph-16.2.6.45+g8fda9838398-1.1 on GA media
These are all security issues fixed in the ceph-16.2.6.45+g8fda9838398-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10676-1- Updated
- 2026-11-02
OSVUSN-4706-1 No score
ceph vulnerabilities
Olle Segerdahl found that ceph-mon and ceph-mgr daemons did not properly restrict access, resulting in gaining access to unauthorized resources. An authenticated user could use this vulnerability to modify the configuration and possibly conduct further attacks. (CVE-2020-10736)
Adam Mohammed found that Ceph Object Gateway was vulnerable to HTTP header injection via a CORS ExposeHeader tag. An attacker could use this to gain access or cause a crash. (CVE-2020-10753)
Ilya Dryomov found that Cephx authentication did not verify Ceph clients correctly and was then vulnerable to replay attacks in Nautilus. An attacker could use the Ceph cluster network to authenticate via a packet sniffer and perform actions. This issue is a reintroduction of CVE-2018-1128. (CVE-2020-25660)
- Record
USN-4706-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cephAlpine:v3.13 |
15.2.0 up to 15.2.6-r0 | 15.2.6-r0 |
cephAlpine:v3.14 |
15.2.0 up to 15.2.6-r0 | 15.2.6-r0 |
cephAlpine:v3.15 |
15.2.0 up to 15.2.6-r0 | 15.2.6-r0 |
cephAlpine:v3.16 |
15.2.0 up to 15.2.6-r0 | 15.2.6-r0 |
ceph16Alpine:v3.17 |
before 15.2.6-r0 | 15.2.6-r0 |
ceph16Alpine:v3.18 |
before 15.2.6-r0 | 15.2.6-r0 |
cephBitnami |
15.2.0 up to 15.2.2 | 15.2.2 |
cephUbuntu:20.04:LTS |
before 15.2.7-0ubuntu0.20.04.2, plus listed versions 14.2.2-0ubuntu314.2.2-0ubuntu414.2.4-0ubuntu114.2.4-0ubuntu214.2.4-0ubuntu3 Show 11 moreShow less15.1.0-0ubuntu215.1.0-0ubuntu315.1.1-0ubuntu115.2.0-0ubuntu115.2.0-0ubuntu215.2.1-0ubuntu115.2.1-0ubuntu215.2.3-0ubuntu0.20.04.115.2.3-0ubuntu0.20.04.215.2.5-0ubuntu0.20.04.115.2.7-0ubuntu0.20.04.1 |
15.2.7-0ubuntu0.20.04.2 |
cephUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 15.2.7-0ubuntu0.20.04.2, plus listed versions 14.2.2-0ubuntu314.2.2-0ubuntu414.2.4-0ubuntu114.2.4-0ubuntu214.2.4-0ubuntu3 Show 11 moreShow less15.1.0-0ubuntu215.1.0-0ubuntu315.1.1-0ubuntu115.2.0-0ubuntu115.2.0-0ubuntu215.2.1-0ubuntu115.2.1-0ubuntu215.2.3-0ubuntu0.20.04.115.2.3-0ubuntu0.20.04.215.2.5-0ubuntu0.20.04.115.2.7-0ubuntu0.20.04.1 |
15.2.7-0ubuntu0.20.04.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-10736 is a high vulnerability (CVSS 8.0) in [unknown] Ceph, published June 22, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.65%, the 51st percentile. Fixed in ceph 15.2.6-r0.
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10736
ceph.io/releases/v15-2-2-octopus-released
nvd.nist.gov/vuln/detail/CVE-2020-10736
github.com/advisories/GHSA-7hf6-hcxg-35gw
security.alpinelinux.org/vuln/CVE-2020-10736
ubuntu.com/security/CVE-2020-10736
Show 17 moreShow less
cve.org/CVERecord?id=CVE-2020-10736
suse.com/security/cve/CVE-2017-16818