Lucene search
Veracode Vulnerability DatabaseVERACODE:28037HistoryDec 03, 2020 - 8:40 a.m.
Privilege Escalation
2020-12-0308:40:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
23
privilege escalation
cephx
authentication
vulnerability
network sniffing
EPSS
0.001
Percentile
48.3%
cephx is vulnerable to privilege escalation attacks. This is because cephx authentication protocol does not verify ceph clients correctly. An attacker who has access to the ceph cluster network is able to sniff packets on the network.
References
access.redhat.com/errata/RHSA-2020:5325
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1890354
ceph.io/community/v15-2-6-octopus-released/
ceph.io/releases/v14-2-14-nautilus-released/
lists.fedoraproject.org/archives/list/[email protected]/message/UBC4KZ44QUQENTYZPVHORGL4K2KV5V4F/
security.gentoo.org/glsa/202105-39
Related
nessus
nessus
openSUSE Security Update : ceph (openSUSE-2020-2057)
2020-11-30 00:00:00
SUSE SLED15 / SLES15 Security Update : ceph (SUSE-SU-2020:3473-1)
2020-12-09 00:00:00
Fedora 33 : 2:ceph (2020-a8f1120195)
2020-12-10 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: ceph-15.2.7-1.fc33
2020-12-10 01:16:25
redhat
redhat
suse
suse
Security update for ceph (moderate)
2020-11-27 00:00:00
Security update for ceph (moderate)
2020-11-27 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:3473-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:3459-1)
2021-06-09 00:00:00
Fedora: Security Advisory for ceph (FEDORA-2020-a8f1120195)
2020-12-10 00:00:00
redhatcve
redhatcve
CVE-2020-25660
2020-11-17 14:08:48
cvelist
cvelist
CVE-2020-25660
2020-11-23 21:18:28
debiancve
debiancve
CVE-2020-25660
2020-11-23 22:15:12
alpinelinux
alpinelinux
CVE-2020-25660
2020-11-23 22:15:12
prion
prion
Design/Logic Flaw
2020-11-23 22:15:00
nvd
nvd
CVE-2020-25660
2020-11-23 22:15:12
cve
cve
CVE-2020-25660
2020-11-23 22:15:12
ubuntucve
ubuntucve
CVE-2020-25660
2020-11-23 00:00:00
osv
osv
CVE-2020-25660
2020-11-23 22:15:12
ceph vulnerabilities
2021-01-28 13:40:18
ubuntu
ubuntu
Ceph vulnerabilities
2021-01-28 00:00:00
archlinux
archlinux
[ASA-202011-22] ceph: multiple issues
2020-11-26 00:00:00
gentoo
gentoo
Ceph: Multiple vulnerabilities
2021-05-26 00:00:00