ceph vulnerabilities (Bitnami)
15 vulnerabilities.
-
cephBitnami Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation 8.1 High -
cephBitnami Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users 9.1 Critical -
cephBitnami Ceph: CephX AES Authentication error 8.8 High -
cephBitnami Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery 8.9 High -
cephBitnami RGW DoS attack with empty HTTP header in S3 object copy 7.5 High -
cephBitnami CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS 6.5 Medium -
cephBitnami Ceph is vulnerable to authentication bypass through RadosGW 8.1 High -
cephBitnami A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner... 9.1 Critical -
cephBitnami An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles... 7.2 High -
cephBitnami A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is... 5.4 Medium -
cephBitnami An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the... 8.0 High -
cephBitnami An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can... 7.5 High -
cephBitnami A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user... 5.8 Medium -
cephBitnami A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2... 6.4 Medium -
cephBitnami A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5,... 7.5 High