Ceph Security Vulnerabilities and Issues — Ceph CVE List

Lucene search

LinuxfoundationCeph

4 matches found

CVE•added 2020/04/23 3:15 p.m.•241 views

CVE-2020-1760

A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.

6.1CVSS5.9AI score0.00249EPSS

CVE•added 2020/04/13 1:15 p.m.•190 views

CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reu...

6.8CVSS6.5AI score0.00412EPSS

CVE•added 2020/04/21 5:15 p.m.•168 views

CVE-2020-1699

A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions 14.2.7 and 15.1.0. An unauthenticated attacker could use this flaw to cause information disclosure on the host machine running the Ceph das...

7.5CVSS7.1AI score0.01822EPSS

CVE•added 2020/04/22 1:15 p.m.•126 views

CVE-2020-12059

An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.

7.5CVSS7.3AI score0.00274EPSS