ceph-base vulnerabilities (Red Hat)
80 vulnerabilities.
-
ceph-baseRed Hat Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation 8.1 High -
ceph-baseRed Hat Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users 9.1 Critical -
ceph-baseRed Hat Ceph: CephX AES Authentication error 8.8 High -
ceph-baseRed Hat Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery 8.9 High -
ceph-baseRed Hat Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High -
ceph-baseRed Hat Potential denial of service in golang.org/x/crypto/ssh/agent 7.5 High -
ceph-baseRed Hat RGW DoS attack with empty HTTP header in S3 object copy 7.5 High -
ceph-baseRed Hat Unbounded allocation when parsing GNU sparse map in archive/tar 4.3 Medium -
ceph-baseRed Hat CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS 6.5 Medium -
ceph-baseRed Hat jwt-go allows excessive memory allocation during header parsing 7.5 High -
ceph-baseRed Hat Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript 5.4 Medium -
ceph-baseRed Hat Predictable results in nanoid generation when given non-integer values 4.3 Medium -
ceph-baseRed Hat Ceph is vulnerable to authentication bypass through RadosGW 8.1 High -
ceph-baseRed Hat Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 3.1 Low -
ceph-baseRed Hat pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation... 7.1 High -
ceph-baseRed Hat WebOb's location header normalization during redirect leads to open redirect 6.1 Medium -
ceph-baseRed Hat In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer... 9.8 Critical -
ceph-baseRed Hat Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip 9.8 Critical -
ceph-baseRed Hat Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution 7.5 High -
ceph-baseRed Hat IBM Storage Ceph denial of service 2.6 Low -
ceph-baseRed Hat Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients 9.8 Critical -
ceph-baseRed Hat Maliciously crafted Git server replies can cause DoS on go-git clients 7.5 High -
ceph-baseRed Hat Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
ceph-baseRed Hat AsyncSSH Rogue Session Attack 6.8 Medium -
ceph-baseRed Hat Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning 8.0 High -
ceph-baseRed Hat Grafana privilege escalation vulnerability 6.7 Medium -
ceph-baseRed Hat OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics 7.5 High -
ceph-baseRed Hat HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
ceph-baseRed Hat IBM Spectrum Fusion HCI improper access control 6.5 Medium -
ceph-baseRed Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
ceph-baseRed Hat Grafana vulnerable to Authentication Bypass by Spoofing 9.4 Critical -
ceph-baseRed Hat Grafana has Broken Access Control in Alert manager: Viewer can send test alerts 4.1 Medium -
ceph-baseRed Hat Grafana Missing Synchronization vulnerability 7.5 High -
ceph-baseRed Hat containerd OCI image importer memory exhaustion 6.2 Medium -
ceph-baseRed Hat Werkzeug may allow high resource usage when parsing multipart form data with many fields 7.5 High -
ceph-baseRed Hat Wrkzeug's incorrect parsing of nameless cookies leads to __Host- cookies bypass 2.6 Low -
ceph-baseRed Hat Removal of TrustCor root certificate 6.8 Medium -
ceph-baseRed Hat A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner... 9.1 Critical -
ceph-baseRed Hat Mistune vulnerable to catastrophic backtracking 7.5 High -
ceph-baseRed Hat Inefficient Regular Expression Complexity in moment 7.5 High -
ceph-baseRed Hat Angular Comment cross site scripting 3.5 Low -
ceph-baseRed Hat Path Traversal in Moment.js 7.5 High -
ceph-baseRed Hat A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the... 6.5 Medium -
ceph-baseRed Hat A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020... 6.1 Medium -
ceph-baseRed Hat A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a... 5.3 Medium -
ceph-baseRed Hat A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14... 6.5 Medium -
ceph-baseRed Hat An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles... 7.2 High -
ceph-baseRed Hat Arbitrary Code Injection 3.3 Low -
ceph-baseRed Hat A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is... 5.4 Medium -
ceph-baseRed Hat In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in... 8.1 High - Show olderLoading…