librados2 vulnerabilities (Red Hat)
87 vulnerabilities.
librados2Red HatA flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in...4.4 Mediumlibrados2Red HatUser credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila,...7.1 Highlibrados2Red HatCeph-ansible 4.0.34.1 creates /etc/ceph/iscsi-gateway.conf with insecure default permissions,...5.5 Mediumlibrados2Red HatA flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2...8.8 Highlibrados2Red HatTiming attacks in python-rsa7.5 Highlibrados2Red HatA flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is...5.4 Mediumlibrados2Red HatServer Side Request Forgery in Grafana8.2 Highlibrados2Red HatAn issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can...7.5 Highlibrados2Red HatA flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user...5.8 Mediumlibrados2Red HatA vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2...6.4 Mediumlibrados2Red HatTaffyDB can allow access to any data items in the DB7.5 Highlibrados2Red HatA flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon...6.5 Mediumlibrados2Red HatA flaw was found in the Ceph RGW configuration with Beast as the front end handling client...7.5 Highlibrados2Red HatArbitrary Code Execution in handlebars4.5 Mediumlibrados2Red HatCeph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the...5.5 Mediumlibrados2Red HatIt was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial...6.5 Mediumlibrados2Red HatIt was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions...3.5 Lowlibrados2Red Hatbootstrap Cross-site Scripting vulnerability6.1 Mediumlibrados2Red HatXSS vulnerability that affects bootstrap6.1 Mediumlibrados2Red HatGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...6.5 Mediumlibrados2Red HatBootstrap Cross-site Scripting vulnerability6.1 Mediumlibrados2Red HatA flaw was found in the way signature calculation was handled by cephx authentication protocol....6.5 Mediumlibrados2Red HatIt was found that cephx authentication protocol did not verify ceph clients correctly and was...7.5 Highlibrados2Red HatA flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having...8.1 Highlibrados2Red HatGrafana Cross-site Scripting (XSS)6.1 Mediumlibrados2Red HatIn Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function...7.5 Highlibrados2Red Hatrpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through...7.5 Highlibrados2Red HatA flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the...6.5 Mediumlibrados2Red HatA flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object...6.5 Mediumlibrados2Red HatThe RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows...7.5 Highlibrados2Red HatThe handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause...6.5 Mediumlibrados2Red HatCRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94...4.3 Mediumlibrados2Red HatUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated...4.0 Mediumlibrados2Red HatUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier,...7.5 Highlibrados2Red HatUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...4.3 Mediumlibrados2Red HatUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...4.3 Mediumlibrados2Red HatUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...3.5 Lowlibrados2Red HatUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier,...3.5 Lowlibrados2Red Hatceph - security update7.5 High