CVE-2020-1716

CVE-2020-1716 : A flaw in the ceph-ansible playbook uses hardcoded default passwords during Ceph deployments. An authenticated attacker could brute-force Ceph deployments and gain administrator access to Ceph clusters via the Ceph dashboard, potentially modifying cluster configurations. Affected:...

CVE-2020-25677

CVE-2020-25677 affects Ceph-ansible v4.0.41, where /etc/ceph/iscsi-gateway.conf is created with insecure default permissions, allowing any local user to read sensitive information. The issue is tied to insecure ownership/permissions of the iscsi-gateway.conf file (cited in Red Hat’s RHSA-2021:008...