ceph vulnerabilities (Ubuntu)
36 vulnerabilities.
-
cephUbuntu Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation 8.1 High -
cephUbuntu Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users 9.1 Critical -
cephUbuntu Ceph: CephX AES Authentication error 8.8 High -
cephUbuntu Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery 8.9 High -
cephUbuntu RGW DoS attack with empty HTTP header in S3 object copy 7.5 High -
cephUbuntu Ceph is vulnerable to authentication bypass through RadosGW 8.1 High -
cephUbuntu IBM Spectrum Fusion HCI improper access control 6.5 Medium -
cephUbuntu A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit... 6.5 Medium -
cephUbuntu A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to... 7.8 High -
cephUbuntu A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner... 9.1 Critical -
cephUbuntu A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the... 6.5 Medium -
cephUbuntu A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020... 6.1 Medium -
cephUbuntu A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a... 5.3 Medium -
cephUbuntu A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14... 6.5 Medium -
cephUbuntu An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles... 7.2 High -
cephUbuntu A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is... 5.4 Medium -
cephUbuntu A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in... 4.4 Medium -
cephUbuntu User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila,... 7.1 High -
cephUbuntu A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2... 8.8 High -
cephUbuntu A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is... 5.4 Medium -
cephUbuntu An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the... 8.0 High -
cephUbuntu An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can... 7.5 High -
cephUbuntu A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user... 5.8 Medium -
cephUbuntu A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An... 6.5 Medium -
cephUbuntu A flaw was found in the Ceph RGW configuration with Beast as the front end handling client... 7.5 High -
cephUbuntu A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL... 7.5 High -
cephUbuntu Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the... 5.5 Medium -
cephUbuntu It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial... 6.5 Medium -
cephUbuntu It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions... 3.5 Low -
cephUbuntu It was found that cephx authentication protocol did not verify ceph clients correctly and was... 7.5 High -
cephUbuntu A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having... 8.1 High -
cephUbuntu A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the... 6.5 Medium -
cephUbuntu A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object... 6.5 Medium -
cephUbuntu The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows... 7.5 High -
cephUbuntu The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause... 6.5 Medium -
cephUbuntu ceph - security update 7.5 High