The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ceph16Upgrade ceph | Aug 22, 2024 | Jun 22, 2020 |
| Suse | — | Upgrade rados-objclass-develUpgrade python3-radosUpgrade librbd-develUpgrade librgw2Upgrade python3-ceph-argparseUpgrade librados2Upgrade python3-cephfsUpgrade python3-rgwUpgrade librgw-develUpgrade python3-rbdUpgrade libcephfs2Upgrade librbd1Upgrade ceph-commonUpgrade python3-ceph-commonUpgrade libcephfs-develUpgrade libradospp-develUpgrade rbd-nbdUpgrade librados-devel | Feb 4, 2022 | Jun 22, 2020 |
| Ubuntu | — | Upgrade ceph-commonUpgrade cephUpgrade ceph-base | Jan 29, 2021 | Jun 22, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub