23 matches found
ceph-deploy admin command copies keyring file to /etc/ceph which is world readable
It was discovered that ceph-deploy, a utility for deploying Red Hat Ceph Storage, would create the keyring file with world readable permissions, which could possibly allow a local user to obtain authentication credentials from the keyring file...
2.1CVSS5.8AI score0.00386EPSS
SaveExploits0References4
openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2014:1638-1)
This openjdk update fixes the following security and non security issues : - Upgrade to 2.4.8 bnc887530 - Changed back from gzipped tarball to xz - Changed the keyring file to add Andrew John Hughes that signed the icedtea package - Change ZERO to AARCH64 tarball - Removed patches : -...
10CVSS7.8AI score0.10117EPSS
SaveExploits2References43
20