Lucene search
+L

9 matches found

OSV
OSV
•added 2026/09/02 2:37 p.m.•7 views

BIT-CEPH-2026-50152 Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Monitor subscription handler fails to properly authorize access to the configuration-key store, allowing any CephX user with only mon allow r capabilities to...

9.1CVSS5.9AI score0.00248EPSS
SaveExploits0References4
Rows per page
Query Builder