Remote Spark Gateway Configuration/Credentials - Exposure Detection

Remote Spark Gateway config found via /gateway.conf. !/usr/bin/env python3 -- coding: utf-8 -- """Remote Spark Gateway config found via /gateway.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Remote Spark...

CVE-2020-25677

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality...

CVE-2020-25677: Cleartext Storage of Sensitive Information

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality...

PT-2020-16157

Name of the Vulnerable Software and Affected Versions Ceph-ansible versions 4.0.34.1 through 4.0.41 Description A flaw in Ceph-ansible allows any user on the system to read sensitive information within the /etc/ceph/iscsi-gateway.conf file due to insecure default permissions. The highest threat...

CVE-2020-25677

A flaw was found in Ceph-ansible where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality...