CVE-2020-25660

🗓️ 23 Nov 2020 22:12:15Reported by [email protected]Type

A flaw in Cephx authentication allows replay attacks in pre-15.2.6 and pre-14.2.14 versions, enabling unauthorized access to Ceph cluster network

Reporter	Title	Published	Views	Family All 112
Prion	Design/Logic Flaw	23 Nov 202022:15	–	prion
Prion	Authentication flaw	10 Jul 201814:29	–	prion
AlpineLinux	CVE-2020-25660	23 Nov 202022:15	–	alpinelinux
Debian CVE	CVE-2020-25660	23 Nov 202022:15	–	debiancve
Debian CVE	CVE-2018-1128	10 Jul 201814:29	–	debiancve
RedhatCVE	CVE-2020-25660	17 Nov 202014:08	–	redhatcve
RedhatCVE	CVE-2018-1128	9 Jul 201817:18	–	redhatcve
Cvelist	CVE-2020-25660	23 Nov 202021:18	–	cvelist
Cvelist	CVE-2018-1128	10 Jul 201814:00	–	cvelist
OSV	CVE-2020-25660	23 Nov 202022:15	–	osv

Nvd

Node

redhat cephRange<14.2.14

redhat cephRange15.0.0–15.2.6

Node

redhat ceph_storageMatch2.0

redhat ceph_storageMatch4.0

redhat openshift_container_platformMatch4.0

Node

fedoraproject fedoraMatch33

Source	Link
security	www.security.gentoo.org/glsa/202105-39
ceph	www.ceph.io/releases/v14-2-14-nautilus-released/
ceph	www.ceph.io/community/v15-2-6-octopus-released/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBC4KZ44QUQENTYZPVHORGL4K2KV5V4F/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Nov 2020 22:15Current

6.7Medium risk

Vulners AI Score6.7

CVSS25.8

CVSS38.8

EPSS0.002

CWE-294