Ceph-deploy Security Vulnerabilities and Issues — Ceph-deploy CVE List

Lucene search

CephCeph-deploy

2 matches found

CVE•added 2015/06/16 4:59 p.m.•47 views

CVE-2015-3010

ceph-deploy before 1.5.23 uses weak permissions (644) for ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.

2.1CVSS5.5AI score0.00048EPSS

CVE•added 2015/06/08 2:59 p.m.•41 views

CVE-2015-4053

The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.

2.1CVSS5.8AI score0.0005EPSS