IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-radosUpgrade librados2-develUpgrade ceph-common-debuginfoUpgrade librbd1-develUpgrade librados2Upgrade python-rbdUpgrade librbd1Upgrade ceph-common | Oct 23, 2023 | Oct 23, 2023 |
| Centos_linux | — | Upgrade librbd-develUpgrade ceph-debugsourceUpgrade ceph-common-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-mgr-debuginfoUpgrade ceph-osd-debuginfoUpgrade libradospp-develUpgrade ceph-resource-agentsUpgrade ceph-baseUpgrade python3-rbdUpgrade python3-rgw-debuginfoUpgrade ceph-selinuxUpgrade rbd-nbdUpgrade cephadm-ansibleUpgrade ceph-test-debuginfoUpgrade ceph-fuseUpgrade ceph-base-debuginfoUpgrade ceph-exporter-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade libradosstriper1Upgrade libradosstriper1-debuginfoUpgrade python3-rgwUpgrade cephfs-topUpgrade python3-cephfs-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade librgw2Upgrade python3-cephfsUpgrade python3-ceph-argparseUpgrade ceph-mds-debuginfoUpgrade ceph-mibUpgrade rbd-mirror-debuginfoUpgrade cephadmUpgrade ceph-immutable-object-cacheUpgrade python3-rbd-debuginfoUpgrade rbd-nbd-debuginfoUpgrade libcephfs2-debuginfoUpgrade python3-radosUpgrade libcephfs2Upgrade librgw2-debuginfoUpgrade ceph-fuse-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade librados-develUpgrade libcephsqlite-debuginfoUpgrade python3-ceph-commonUpgrade libcephfs-develUpgrade librados-devel-debuginfoUpgrade ceph-debuginfoUpgrade rbd-fuse-debuginfoUpgrade python3-rados-debuginfoUpgrade librgw-develUpgrade ceph-common | Nov 1, 2023 | Oct 12, 2023 |
| Debian | — | Upgrade ceph | Oct 25, 2023 | Oct 25, 2023 |
| Redhat_linux | — | Upgrade libradosstriper1-debuginfoUpgrade python3-rgwUpgrade python3-cephfsUpgrade python3-rgw-debuginfoUpgrade librgw-develUpgrade ceph-resource-agentsUpgrade libradospp-develUpgrade python3-rbdUpgrade rbd-nbdUpgrade rbd-nbd-debuginfoUpgrade ceph-debuginfoUpgrade python3-radosUpgrade librados-develUpgrade libcephfs2Upgrade ceph-commonUpgrade librgw2-debuginfoUpgrade python3-rados-debuginfoUpgrade ceph-baseUpgrade ceph-fuse-debuginfoUpgrade python3-ceph-argparseUpgrade ceph-mibUpgrade ceph-debugsourceUpgrade librgw2Upgrade libcephsqlite-debuginfoUpgrade ceph-selinuxUpgrade libcephfs-develUpgrade ceph-common-debuginfoUpgrade cephadm-ansibleUpgrade ceph-test-debuginfoUpgrade ceph-fuseUpgrade ceph-base-debuginfoUpgrade librados-devel-debuginfoUpgrade python3-rbd-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-mds-debuginfoUpgrade ceph-immutable-object-cacheUpgrade python3-ceph-commonUpgrade ceph-mgr-debuginfoUpgrade cephfs-topUpgrade python3-cephfs-debuginfoUpgrade libcephfs2-debuginfoUpgrade librbd-develUpgrade rbd-mirror-debuginfoUpgrade cephadmUpgrade ceph-radosgw-debuginfoUpgrade ceph-mon-debuginfoUpgrade libradosstriper1Upgrade rbd-fuse-debuginfoUpgrade ceph-exporter-debuginfoUpgrade ceph-immutable-object-cache-debuginfo | Nov 1, 2023 | Oct 12, 2023 |
| Ubuntu | — | Upgrade ceph-baseUpgrade cephUpgrade ceph-base (Ubuntu Pro)Upgrade ceph-common (Ubuntu Pro)Upgrade ceph-commonUpgrade ceph (Ubuntu Pro) | Jan 30, 2024 | Jan 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub