A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. Any authenticated attacker can abuse this flaw to brute-force Ceph deployments, and gain administrator access to Ceph clusters via the Ceph dashboard to initiate read, write, and delete Ceph clusters and also modify Ceph cluster configurations. Versions before ceph-ansible 6.0.0alpha1 are affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nfs-ganesha-debugsourceUpgrade python3-rgw-debuginfoUpgrade s3cmdUpgrade nfs-ganesha-vfsUpgrade ceph-ansibleUpgrade nfs-ganeshaUpgrade python3-cephfsUpgrade libradosstriper1Upgrade nfs-ganesha-ceph-debuginfoUpgrade python-xmlsec-debuginfoUpgrade python-rgwUpgrade ceph-mon-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade python3-cephfs-debuginfoUpgrade python3-samlUpgrade nfs-ganesha-rados-urlsUpgrade librbd-develUpgrade python-defusedxmlUpgrade python3-defusedxmlUpgrade ceph-base-debuginfoUpgrade python-cephfsUpgrade python3-rbdUpgrade ceph-baseUpgrade ceph-mgr-debuginfoUpgrade nfs-ganesha-rgwUpgrade python3-rgwUpgrade librgw2Upgrade python3-xmlsec-debuginfoUpgrade ceph-common-debuginfoUpgrade python-ceph-argparseUpgrade rbd-mirror-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-selinuxUpgrade ceph-fuseUpgrade ceph-osd-debuginfoUpgrade python3-ceph-argparseUpgrade libradospp-develUpgrade nfs-ganesha-cephUpgrade ceph-debugsourceUpgrade python-xmlsec-debugsourceUpgrade nfs-ganesha-rados-graceUpgrade ceph-test-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-radosgwUpgrade python-isodateUpgrade librados-develUpgrade python3-rados-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-mdsUpgrade python3-radosUpgrade librgw-develUpgrade ceph-grafana-dashboardsUpgrade nfs-ganesha-proxy-debuginfoUpgrade rbd-nbd-debuginfoUpgrade rbd-fuse-debuginfoUpgrade nfs-ganesha-selinuxUpgrade librados-devel-debuginfoUpgrade libcephfs2-debuginfoUpgrade rbd-mirrorUpgrade nfs-ganesha-rgw-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade nfs-ganesha-proxyUpgrade nfs-ganesha-debuginfoUpgrade ceph-mds-debuginfoUpgrade libcephfs2Upgrade ceph-fuse-debuginfoUpgrade python-samlUpgrade python-xmlsecUpgrade libradosstriper1-debuginfoUpgrade ceph-debuginfoUpgrade libcephfs-develUpgrade python3-isodateUpgrade ceph-commonUpgrade rbd-nbdUpgrade python3-xmlsecUpgrade python3-rbd-debuginfo | Dec 11, 2020 | May 19, 2020 |
| Redhat_linux | — | Upgrade ceph-ansibleUpgrade python-xmlsec-debugsourceUpgrade ceph-fuse-debuginfoUpgrade libradosstriper1Upgrade nfs-ganesha-rados-grace-debuginfoUpgrade python3-rbdUpgrade nfs-ganesha-rados-graceUpgrade ceph-selinuxUpgrade ceph-mds-debuginfoUpgrade ceph-common-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade ceph-baseUpgrade librados-devel-debuginfoUpgrade python-ceph-argparseUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade ceph-fuseUpgrade ceph-osd-debuginfoUpgrade python-cephfsUpgrade python3-rgw-debuginfoUpgrade rbd-mirrorUpgrade python3-rbd-debuginfoUpgrade ceph-debuginfoUpgrade libradospp-develUpgrade ceph-commonUpgrade python-rgwUpgrade nfs-ganesha-debugsourceUpgrade nfs-ganesha-rados-urlsUpgrade s3cmdUpgrade librgw2-debuginfoUpgrade nfs-ganeshaUpgrade librbd-develUpgrade python3-xmlsecUpgrade rbd-nbdUpgrade nfs-ganesha-vfsUpgrade libradosstriper1-debuginfoUpgrade libcephfs-develUpgrade python3-isodateUpgrade ceph-radosgwUpgrade python-xmlsec-debuginfoUpgrade ceph-mgr-debuginfoUpgrade python3-cephfs-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade nfs-ganesha-proxyUpgrade rbd-nbd-debuginfoUpgrade libcephfs2Upgrade python3-rgwUpgrade nfs-ganesha-selinuxUpgrade python-xmlsecUpgrade ceph-mon-debuginfoUpgrade python3-defusedxmlUpgrade nfs-ganesha-proxy-debuginfoUpgrade python3-ceph-argparseUpgrade librados-develUpgrade python3-xmlsec-debuginfoUpgrade librgw-develUpgrade python3-rados-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-base-debuginfoUpgrade libcephfs2-debuginfoUpgrade python-samlUpgrade python3-radosUpgrade python3-cephfsUpgrade nfs-ganesha-rgwUpgrade rbd-fuse-debuginfoUpgrade python3-samlUpgrade rbd-mirror-debuginfoUpgrade ceph-mdsUpgrade ceph-grafana-dashboardsUpgrade ceph-radosgw-debuginfoUpgrade python-defusedxmlUpgrade librgw2Upgrade nfs-ganesha-ceph-debuginfoUpgrade python-isodateUpgrade ceph-test-debuginfoUpgrade nfs-ganesha-cephUpgrade ceph-debugsource | Dec 11, 2020 | May 19, 2020 |
| Rocky_linux | — | Upgrade smartmontoolsUpgrade smartmontools-debugsourceUpgrade smartmontools-debuginfo | Mar 12, 2024 | May 28, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub