A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.
[
{
"product": "ceph-ansible",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "ceph-ansible-4.0.41"
}
]
}
]