A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Jul 25, 2022 |
| Centos_linux | — | Upgrade gperftools-libs-debuginfoUpgrade libradosstriper1Upgrade librgw2Upgrade nfs-ganesha-proxyUpgrade nfs-ganesha-rados-urlsUpgrade ceph-fuseUpgrade nfs-ganesha-cephUpgrade oath-toolkit-debuginfoUpgrade ceph-mds-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade librbd-develUpgrade nfs-ganesha-vfsUpgrade rbd-nbdUpgrade ceph-common-debuginfoUpgrade oath-toolkit-debugsourceUpgrade libunwindUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade python3-rgw-debuginfoUpgrade cephadmUpgrade ceph-fuse-debuginfoUpgrade ceph-immutable-object-cacheUpgrade ceph-mon-debuginfoUpgrade ceph-resource-agentsUpgrade ceph-selinuxUpgrade oathtool-debuginfoUpgrade cephfs-topUpgrade ceph-mibUpgrade cephfs-mirror-debuginfoUpgrade ceph-radosgwUpgrade pam_oath-debuginfoUpgrade rbd-mirrorUpgrade ceph-osd-debuginfoUpgrade libradosstriper1-debuginfoUpgrade libunwind-debugsourceUpgrade nfs-ganesha-debuginfoUpgrade nfs-ganeshaUpgrade pskctool-debuginfoUpgrade python3-rbd-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade leveldbUpgrade ceph-mdsUpgrade nfs-ganesha-rados-graceUpgrade ceph-test-debuginfoUpgrade python3-ceph-commonUpgrade leveldb-debugsourceUpgrade liboathUpgrade python3-radosUpgrade liboath-debuginfoUpgrade ceph-ansibleUpgrade libcephfs-develUpgrade python3-cephfs-debuginfoUpgrade rbd-fuse-debuginfoUpgrade leveldb-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade ceph-mgr-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade nfs-ganesha-rgwUpgrade ceph-baseUpgrade libcephfs2-debuginfoUpgrade librados-develUpgrade rbd-nbd-debuginfoUpgrade ceph-commonUpgrade libcephsqlite-debuginfoUpgrade ceph-base-debuginfoUpgrade python3-rados-debuginfoUpgrade gperftools-libsUpgrade nfs-ganesha-rgw-debuginfoUpgrade cephfs-mirrorUpgrade rbd-mirror-debuginfoUpgrade python3-rgwUpgrade nfs-ganesha-selinuxUpgrade cephadm-ansibleUpgrade nfs-ganesha-vfs-debuginfoUpgrade libcephfs2Upgrade libunwind-debuginfoUpgrade ceph-debugsourceUpgrade python3-ceph-argparseUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade gperftools-debugsourceUpgrade librgw-develUpgrade librados-devel-debuginfoUpgrade libpskc-debuginfoUpgrade ceph-grafana-dashboardsUpgrade python3-rbdUpgrade python3-cephfsUpgrade librgw2-debuginfoUpgrade libradospp-devel | Aug 11, 2022 | Jul 25, 2022 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Jul 25, 2022 |
| Redhat_linux | — | Upgrade nfs-ganesha-debuginfoUpgrade cephfs-topUpgrade nfs-ganesha-rados-urlsUpgrade libradosstriper1Upgrade python3-rbdUpgrade ceph-mon-debuginfoUpgrade ceph-fuse-debuginfoUpgrade librgw2Upgrade rbd-nbdUpgrade ceph-mibUpgrade nfs-ganesha-proxyUpgrade rbd-mirrorUpgrade libunwind-debugsourceUpgrade ceph-osd-debuginfoNo solution existsUpgrade ceph-ansibleUpgrade python3-rgw-debuginfoUpgrade leveldb-debugsourceUpgrade leveldbUpgrade ceph-selinuxUpgrade python3-rbd-debuginfoUpgrade ceph-mdsUpgrade libcephsqlite-debuginfoUpgrade ceph-fuseUpgrade libradospp-develUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade pskctool-debuginfoUpgrade nfs-ganesha-cephUpgrade oath-toolkit-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-mgr-debuginfoUpgrade liboath-debuginfoUpgrade nfs-ganeshaUpgrade nfs-ganesha-vfsUpgrade cephadmUpgrade ceph-immutable-object-cacheUpgrade nfs-ganesha-rados-graceUpgrade ceph-test-debuginfoUpgrade libradosstriper1-debuginfoUpgrade ceph-mds-debuginfoUpgrade ceph-radosgwUpgrade ceph-resource-agentsUpgrade nfs-ganesha-debugsourceUpgrade cephadm-ansibleUpgrade cephfs-mirror-debuginfoUpgrade liboathUpgrade ceph-base-debuginfoUpgrade ceph-common-debuginfoUpgrade oath-toolkit-debugsourceUpgrade libpskc-debuginfoUpgrade librbd-develUpgrade nfs-ganesha-proxy-debuginfoUpgrade python3-ceph-argparseUpgrade python3-rgwUpgrade rbd-mirror-debuginfoUpgrade gperftools-libsUpgrade python3-rados-debuginfoUpgrade python3-cephfsUpgrade ceph-commonUpgrade nfs-ganesha-ceph-debuginfoUpgrade rbd-nbd-debuginfoUpgrade libcephfs-develUpgrade rbd-fuse-debuginfoUpgrade ceph-baseUpgrade gperftools-debugsourceUpgrade cephfs-mirrorUpgrade librgw-develUpgrade pam_oath-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade libcephfs2Upgrade libunwind-debuginfoUpgrade nfs-ganesha-rgwUpgrade python3-ceph-commonUpgrade oathtool-debuginfoUpgrade ceph-debugsourceUpgrade ceph-grafana-dashboardsUpgrade ceph-immutable-object-cache-debuginfoUpgrade libcephfs2-debuginfoUpgrade leveldb-debuginfoUpgrade gperftools-libs-debuginfoUpgrade python3-cephfs-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade python3-radosUpgrade librados-devel-debuginfoUpgrade libunwindUpgrade librados-develUpgrade nfs-ganesha-rgw-debuginfoUpgrade nfs-ganesha-selinux | Aug 11, 2022 | Jul 25, 2022 |
| Suse | — | Upgrade python3-ceph-argparseUpgrade ceph-prometheus-alertsUpgrade ceph-mgrUpgrade cephUpgrade ceph-mgr-cephadmUpgrade libradospp-develUpgrade ceph-testUpgrade python3-rbdUpgrade ceph-mgr-diskprediction-localUpgrade ceph-osdUpgrade ceph-mgr-modules-coreUpgrade rbd-nbdUpgrade rbd-mirrorUpgrade cephfs-shellUpgrade ceph-baseUpgrade libcephsqliteUpgrade ceph-mgr-k8seventsUpgrade cephfs-topUpgrade rados-objclass-develUpgrade librados-develUpgrade ceph-mgr-rookUpgrade rbd-fuseUpgrade libcephsqlite-develUpgrade python3-cephfsUpgrade ceph-fuseUpgrade libcephfs2Upgrade python3-rgwUpgrade ceph-mdsUpgrade librgw2Upgrade cephfs-mirrorUpgrade libcephfs-develUpgrade ceph-commonUpgrade ceph-immutable-object-cacheUpgrade librbd1Upgrade librados2Upgrade cephadmUpgrade ceph-radosgwUpgrade librbd-develUpgrade librgw-develUpgrade ceph-monUpgrade python3-ceph-commonUpgrade python3-radosUpgrade ceph-mgr-dashboardUpgrade ceph-grafana-dashboards | Mar 28, 2023 | Jul 25, 2022 |
| Ubuntu | — | Upgrade ceph-commonUpgrade cephUpgrade ceph-base | May 10, 2023 | Jul 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub