A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by searching the mgr logs for grafana and dashboard, with passwords visible.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ceph-radosgwUpgrade python3-rgwUpgrade librbd-develUpgrade python3-rbd-debuginfoUpgrade python3-radosUpgrade ceph-mon-debuginfoUpgrade ceph-selinuxUpgrade ceph-mds-debuginfoUpgrade gperftools-libs-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-ansibleUpgrade gperftools-debugsourceUpgrade ceph-fuseUpgrade ceph-common-debuginfoUpgrade tcmu-runnerUpgrade rbd-fuse-debuginfoUpgrade ceph-fuse-debuginfoUpgrade libradosstriper1Upgrade librgw2Upgrade ceph-commonUpgrade python3-cephfsUpgrade ceph-mdsUpgrade python3-cephfs-debuginfoUpgrade python-rgwUpgrade libcephfs-develUpgrade ceph-base-debuginfoUpgrade ceph-baseUpgrade gperftools-libsUpgrade librgw2-debuginfoUpgrade libradosstriper1-debuginfoUpgrade librados-develUpgrade rbd-nbd-debuginfoUpgrade rbd-mirrorUpgrade python-ceph-argparseUpgrade ceph-test-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-mgr-debuginfoUpgrade ceph-debugsourceUpgrade python3-ceph-argparseUpgrade libradospp-develUpgrade python3-rados-debuginfoUpgrade rbd-nbdUpgrade rbd-mirror-debuginfoUpgrade libcephfs2-debuginfoUpgrade libcephfs2Upgrade python3-rbdUpgrade librados-devel-debuginfoUpgrade ceph-debuginfoUpgrade python-cephfsUpgrade python3-rgw-debuginfoUpgrade libtcmuUpgrade librgw-develUpgrade ceph-grafana-dashboards | Jun 1, 2021 | Jan 8, 2021 |
| Debian | — | Upgrade ceph | Oct 25, 2023 | Jan 8, 2021 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Jan 8, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-radosUpgrade librbd1Upgrade librados2Upgrade python-rbd | May 18, 2021 | Jan 8, 2021 |
| Redhat_linux | — | Upgrade ceph-grafana-dashboardsUpgrade gperftools-libs-debuginfoUpgrade librgw2-debuginfoUpgrade libcephfs-develUpgrade libtcmuUpgrade gperftools-debugsourceUpgrade ceph-commonUpgrade libradosstriper1-debuginfoUpgrade ceph-radosgwUpgrade rbd-nbd-debuginfoUpgrade rbd-mirrorUpgrade rbd-fuse-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-mds-debuginfoUpgrade tcmu-runnerUpgrade gperftools-libsUpgrade librados-devel-debuginfoUpgrade librados-develUpgrade python-cephfsUpgrade ceph-debuginfoUpgrade rbd-nbdUpgrade ceph-fuse-debuginfoUpgrade libcephfs2-debuginfoUpgrade libcephfs2Upgrade librgw-develUpgrade python3-radosUpgrade python3-rados-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-debugsourceUpgrade ceph-ansibleUpgrade ceph-mdsUpgrade ceph-common-debuginfoUpgrade ceph-mgr-debuginfoUpgrade ceph-selinuxUpgrade ceph-radosgw-debuginfoUpgrade libradospp-develUpgrade python-ceph-argparseUpgrade python3-cephfsUpgrade ceph-base-debuginfoUpgrade python3-rbdUpgrade librgw2No solution existsUpgrade python3-rgw-debuginfoUpgrade librbd-develUpgrade python-rgwUpgrade libradosstriper1Upgrade python3-cephfs-debuginfoUpgrade rbd-mirror-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-baseUpgrade python3-rgwUpgrade python3-ceph-argparseUpgrade ceph-fuseUpgrade ceph-osd-debuginfo | Apr 30, 2021 | Jan 8, 2021 |
| Suse | — | Upgrade python3-ceph-argparseUpgrade librbd1Upgrade libcephfs2Upgrade ceph-commonUpgrade ceph-mgr-modules-coreUpgrade ceph-grafana-dashboardsUpgrade ceph-mgr-k8seventsUpgrade ceph-baseUpgrade cephfs-shellUpgrade ceph-mgr-diskprediction-localUpgrade ceph-mgrUpgrade librados-develUpgrade ceph-monUpgrade libcephfs-develUpgrade libradospp-develUpgrade python3-rbdUpgrade ceph-prometheus-alertsUpgrade librgw-develUpgrade python3-rgwUpgrade ceph-immutable-object-cacheUpgrade rbd-fuseUpgrade cephUpgrade python3-ceph-commonUpgrade python3-radosUpgrade ceph-mdsUpgrade ceph-radosgwUpgrade ceph-mgr-rookUpgrade rbd-mirrorUpgrade cephadmUpgrade ceph-mgr-dashboardUpgrade librbd-develUpgrade ceph-mgr-cephadmUpgrade ceph-fuseUpgrade librgw2Upgrade ceph-testUpgrade librados2Upgrade python3-cephfsUpgrade rbd-nbdUpgrade ceph-mgr-diskprediction-cloudUpgrade rados-objclass-develUpgrade ceph-osd | Apr 13, 2021 | Jan 8, 2021 |
| Ubuntu | — | Upgrade ceph-mgr-cephadmUpgrade ceph-baseUpgrade ceph-commonUpgrade cephadmUpgrade ceph-mgr-diskprediction-localUpgrade radosgwUpgrade ceph-mgr-modules-coreUpgrade cephUpgrade ceph-mgrUpgrade ceph-mgr-dashboardUpgrade ceph-mgr-diskprediction-cloudUpgrade ceph-mgr-k8seventsUpgrade ceph-mgr-rook | Jun 25, 2021 | Jan 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub