{"id":"CVE-2020-25677","aliases":["EUVD-2020-18339","GHSA-637g-65xr-xr73","RHSA-2021:0081"],"status":"published","title":"Ceph-ansible 4.0.34.1 creates /etc/ceph/iscsi-gateway.conf with insecure default permissions,...","description":"A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00213,"percentile":0.11724,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-312"],"published":"2020-12-08T00:02:25Z","modified":"2026-10-24T10:30:16Z","affected":[{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-grafana-dashboards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-diskprediction-local","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-k8sevents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-rook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-osd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-radosgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"rbd-mirror","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-grafana-dashboards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-diskprediction-local","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-k8sevents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-rook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-osd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-radosgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-mirror","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.41-1.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.41-1.el8cp"}]}],"bundled":3}],"products":[{"vendor":"ceph","product":"ceph-ansible"},{"vendor":"redhat","product":"ceph_storage"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1892108","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Vendor Advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25677","tags":["advisory"]},{"url":"https://github.com/ceph/ceph-ansible/pull/5964"},{"url":"https://github.com/advisories/GHSA-637g-65xr-xr73"},{"url":"https://access.redhat.com/errata/RHSA-2021:0081","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1582280","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1731158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1763021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1774428","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1774605","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786106","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1791911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1800382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1826690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1829214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1830375","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1831299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1831682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1836431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1841436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1845501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1850947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1855148","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1855439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1855448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1859180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1859679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1859872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1860057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1860073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1860739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1861755","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1866257","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1866308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1866834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1867697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1867698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1868638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1869797","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872879","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1873221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1873915","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1874756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1875628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1875736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1876692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1876976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1877300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1877413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1877737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1877745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1877910","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1878145","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1878250","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1878267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1878268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1878271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1878500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879819","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880188","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880252","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1881288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1881313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1881523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1882426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1882484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1882705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1883283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1884023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1885693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1887716","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889668","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1890354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1890439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1891098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1892173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1892295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1892387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1893740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1893989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1894702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1896587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897995","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1898486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1898599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1898856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1899860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1900109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902281","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1903612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1904340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1904958","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0081.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25660","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25660","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25660","tags":["advisory"]},{"url":"https://ceph.io/community/v15-2-6-octopus-released/","tags":["article"]},{"url":"https://ceph.io/releases/v14-2-14-nautilus-released/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25677","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25677","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27781","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27781","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27781","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-25677","description":"A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.","status":"published","published":"2020-12-08T00:02:25Z","modified":"2024-08-04T15:40:36.651Z","cwes":["CWE-312"],"updated_at":"2026-11-02T14:35:48.854892Z"}],"euvd":[{"id":"EUVD-2020-18339","description":"A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.","status":"published","published":"2020-12-08T00:02:25Z","modified":"2024-08-04T15:40:36Z","updated_at":"2026-11-03T03:07:17.317062Z"}],"ghsa":[{"id":"GHSA-637g-65xr-xr73","title":"Ceph-ansible 4.0.34.1 creates /etc/ceph/iscsi-gateway.conf with insecure default permissions,...","description":"Ceph-ansible 4.0.34.1 creates /etc/ceph/iscsi-gateway.conf with insecure default permissions, allowing any user to read the sensitive information within.","status":"published","published":"2022-05-24T17:35:33Z","modified":"2023-01-29T05:04:52Z","cwes":["CWE-312"],"updated_at":"2026-11-02T14:45:39.783328Z"}],"nvd":[{"id":"CVE-2020-25677","description":"A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.","status":"published","published":"2020-12-08T01:15:12.07Z","modified":"2026-06-17T03:07:06.707Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-312"],"updated_at":"2026-11-02T14:06:27.10541Z"}],"osv":[{"id":"CVE-2020-25677","description":"A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.","status":"published","published":"2020-12-08T01:15:12.07Z","modified":"2026-10-24T10:30:16.22013342Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:15.879068Z"},{"id":"RHSA-2021:0081","title":"Red Hat Security Advisory: Red Hat Ceph Storage 4.2 Security and Bug Fix update","status":"published","published":"2024-09-16T04:47:07Z","modified":"2026-08-19T10:01:21Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"}]}}