A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. Ceph versions 3.x and 4.x are vulnerable to this issue.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Jun 26, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 26, 2020 |
| Centos_linux | — | Upgrade ceph-selinuxUpgrade nfs-ganesha-rados-urlsUpgrade rbd-mirrorUpgrade ceph-mdsUpgrade nfs-ganesha-proxyUpgrade nfs-ganesha-rados-graceUpgrade ceph-fuseUpgrade ceph-test-debuginfoUpgrade python-cephfsUpgrade rbd-nbdUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-ansibleUpgrade ceph-radosgw-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-mds-debuginfoUpgrade python3-radosUpgrade librbd-develUpgrade python3-cephfs-debuginfoUpgrade ceph-fuse-debuginfoUpgrade librgw2Upgrade ceph-common-debuginfoUpgrade nfs-ganesha-rgwUpgrade libradosstriper1Upgrade python-ceph-argparseUpgrade ceph-mon-debuginfoUpgrade ceph-radosgwUpgrade ceph-medicUpgrade python3-rados-debuginfoUpgrade librgw2-debuginfoUpgrade python-rgwUpgrade rbd-fuse-debuginfoUpgrade python3-rgwUpgrade nfs-ganesha-ceph-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade python3-cephfsUpgrade libradospp-develUpgrade libcephfs2-debuginfoUpgrade librgw-develUpgrade nfs-ganesha-rgw-debuginfoUpgrade ceph-debuginfoUpgrade ceph-baseUpgrade ceph-debugsourceUpgrade ceph-commonUpgrade python3-rbdUpgrade ceph-grafana-dashboardsUpgrade libcephfs-develUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-cephUpgrade rbd-mirror-debuginfoUpgrade python3-rbd-debuginfoUpgrade python3-ceph-argparseUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade librados-devel-debuginfoUpgrade librados-develUpgrade rbd-nbd-debuginfoUpgrade ceph-base-debuginfoUpgrade libcephfs2Upgrade nfs-ganeshaUpgrade cockpit-ceph-installerUpgrade python3-rgw-debuginfoUpgrade nfs-ganesha-vfsUpgrade ceph-mgr-debuginfoUpgrade libradosstriper1-debuginfo | Aug 19, 2020 | Jun 26, 2020 |
| Debian | — | Upgrade ceph | Aug 12, 2021 | Jun 26, 2020 |
| Freebsd | — | Upgrade ceph14 | Aug 18, 2020 | Aug 16, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-rbdUpgrade librbd1Upgrade python-radosUpgrade librados2Upgrade ceph-common | May 25, 2022 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ceph-commonUpgrade python-rbdUpgrade librbd1Upgrade python-radosUpgrade librados2 | Apr 26, 2022 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-radosUpgrade librbd1Upgrade cephUpgrade python-rbdUpgrade librados2 | Feb 2, 2021 | Jun 26, 2020 |
| Redhat_linux | — | Upgrade nfs-ganesha-rados-urlsUpgrade python3-cephfs-debuginfoUpgrade rbd-mirror-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade python-cephfsUpgrade nfs-ganesha-rgwUpgrade ceph-mds-debuginfoUpgrade nfs-ganeshaUpgrade ceph-selinuxUpgrade nfs-ganesha-ceph-debuginfoUpgrade libradospp-develUpgrade ceph-base-debuginfoUpgrade ceph-baseUpgrade nfs-ganesha-vfsUpgrade python3-rgw-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-mgr-debuginfoUpgrade ceph-test-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-osd-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade python-ceph-argparseUpgrade libradosstriper1Upgrade ceph-medicUpgrade cockpit-ceph-installerUpgrade rbd-nbd-debuginfoUpgrade python3-rbdUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-debugsourceUpgrade python3-rgwUpgrade ceph-grafana-dashboardsUpgrade python3-rados-debuginfoUpgrade python3-cephfsUpgrade ceph-fuse-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade python-rgwUpgrade python3-ceph-argparseUpgrade librados-develUpgrade librgw-develUpgrade librgw2Upgrade ceph-debugsourceUpgrade ceph-commonUpgrade rbd-fuse-debuginfoUpgrade nfs-ganesha-selinuxUpgrade libradosstriper1-debuginfoUpgrade ceph-fuseUpgrade ceph-mdsUpgrade ceph-debuginfoUpgrade libcephfs2-debuginfoUpgrade ceph-ansibleUpgrade libcephfs-develUpgrade librados-devel-debuginfoUpgrade librgw2-debuginfoUpgrade rbd-nbdUpgrade python3-radosUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade librbd-develUpgrade nfs-ganesha-vfs-debuginfoUpgrade nfs-ganesha-proxyUpgrade rbd-mirrorUpgrade libcephfs2Upgrade ceph-radosgw | Aug 19, 2020 | Jun 26, 2020 |
| Suse | — | Upgrade ceph-dashboard-e2eUpgrade rados-objclass-develUpgrade python-rgwUpgrade python3-ceph-argparseUpgrade ceph-mgr-diskprediction-localUpgrade python-radosUpgrade python3-cephfsUpgrade rbd-fuseUpgrade librbd-develUpgrade python3-rbdUpgrade ceph-osdUpgrade cephUpgrade libradospp-develUpgrade ceph-fuseUpgrade ceph-resource-agentsUpgrade cephfs-shellUpgrade ceph-mgr-dashboardUpgrade ceph-mgr-k8seventsUpgrade ceph-mdsUpgrade ceph-testUpgrade ceph-mgr-diskprediction-cloudUpgrade libradosstriper1Upgrade librgw2Upgrade ceph-prometheus-alertsUpgrade python3-rgwUpgrade ceph-radosgwUpgrade librados2Upgrade python-cephfsUpgrade libcephfs2Upgrade ceph-mgrUpgrade librbd1Upgrade ceph-monUpgrade libcephfs-develUpgrade python-rbdUpgrade librados-develUpgrade ceph-mgr-sshUpgrade ceph-grafana-dashboardsUpgrade rbd-mirrorUpgrade python3-radosUpgrade librgw-develUpgrade libradosstriper-develUpgrade ceph-mgr-rookUpgrade rbd-nbdUpgrade ceph-commonUpgrade ceph-base | Jun 26, 2020 | Jun 25, 2020 |
| Ubuntu | — | Upgrade ceph-commonUpgrade cephUpgrade ceph-base | Sep 23, 2020 | Jun 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub