A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. Ceph versions 3.x and 4.x are vulnerable to this issue.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Jun 26, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 26, 2020 |
| Centos_linux | — | Upgrade ceph-commonUpgrade python3-ceph-argparseUpgrade libcephfs-develUpgrade cockpit-ceph-installerUpgrade libcephfs2Upgrade libradosstriper1-debuginfoUpgrade libcephfs2-debuginfoUpgrade librados-devel-debuginfoUpgrade python3-rgw-debuginfoUpgrade nfs-ganesha-vfsUpgrade libradospp-develUpgrade ceph-debugsourceUpgrade rbd-nbd-debuginfoUpgrade ceph-mgr-debuginfoUpgrade rbd-mirror-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade librados-develUpgrade python3-rbd-debuginfoUpgrade python3-rbdUpgrade nfs-ganesha-selinuxUpgrade librgw-develUpgrade nfs-ganesha-rgw-debuginfoUpgrade ceph-base-debuginfoUpgrade nfs-ganeshaUpgrade ceph-baseUpgrade ceph-debuginfoUpgrade ceph-grafana-dashboardsUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade python3-radosUpgrade librgw2-debuginfoUpgrade python-rgwUpgrade rbd-fuse-debuginfoUpgrade ceph-radosgwUpgrade ceph-medicUpgrade nfs-ganesha-vfs-debuginfoUpgrade librgw2Upgrade librbd-develUpgrade ceph-test-debuginfoUpgrade ceph-fuseUpgrade ceph-mdsUpgrade rbd-nbdUpgrade ceph-mds-debuginfoUpgrade ceph-ansibleUpgrade rbd-mirrorUpgrade nfs-ganesha-proxyUpgrade nfs-ganesha-rgwUpgrade python-ceph-argparseUpgrade ceph-mon-debuginfoUpgrade python-cephfsUpgrade nfs-ganesha-rados-urlsUpgrade python3-rgwUpgrade nfs-ganesha-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-osd-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade python3-cephfs-debuginfoUpgrade python3-cephfsUpgrade ceph-fuse-debuginfoUpgrade python3-rados-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-selinuxUpgrade libradosstriper1 | Aug 19, 2020 | Jun 26, 2020 |
| Debian | — | Upgrade ceph | Aug 12, 2021 | Jun 26, 2020 |
| Freebsd | — | Upgrade ceph14 | Aug 18, 2020 | Aug 16, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ceph-commonUpgrade python-radosUpgrade librados2Upgrade librbd1Upgrade python-rbd | May 25, 2022 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade librbd1Upgrade ceph-commonUpgrade python-rbdUpgrade librados2Upgrade python-rados | Apr 26, 2022 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade librbd1Upgrade python-radosUpgrade python-rbdUpgrade cephUpgrade librados2 | Feb 2, 2021 | Jun 26, 2020 |
| Redhat_linux | — | Upgrade ceph-mgr-debuginfoUpgrade python3-rgwUpgrade nfs-ganeshaUpgrade python3-rbdUpgrade nfs-ganesha-cephUpgrade ceph-common-debuginfoUpgrade ceph-baseUpgrade nfs-ganesha-debugsourceUpgrade python-cephfsUpgrade ceph-mds-debuginfoUpgrade ceph-base-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade ceph-medicUpgrade libradosstriper1Upgrade nfs-ganesha-ceph-debuginfoUpgrade libradospp-develUpgrade nfs-ganesha-rados-urlsUpgrade ceph-radosgw-debuginfoUpgrade ceph-selinuxUpgrade rbd-mirror-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-test-debuginfoUpgrade python3-rgw-debuginfoUpgrade python3-rbd-debuginfoUpgrade cockpit-ceph-installerUpgrade nfs-ganesha-vfsUpgrade nfs-ganesha-rgwUpgrade python-ceph-argparseUpgrade ceph-mon-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade rbd-nbd-debuginfoUpgrade python3-cephfs-debuginfoUpgrade python3-radosUpgrade ceph-grafana-dashboardsUpgrade rbd-fuse-debuginfoUpgrade nfs-ganesha-selinuxUpgrade ceph-ansibleUpgrade ceph-commonUpgrade ceph-fuse-debuginfoUpgrade libcephfs2-debuginfoUpgrade ceph-radosgwUpgrade nfs-ganesha-proxyUpgrade librados-devel-debuginfoUpgrade libcephfs-develUpgrade libradosstriper1-debuginfoUpgrade libcephfs2Upgrade librgw-develUpgrade rbd-mirrorUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-debugsourceUpgrade librgw2-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade librgw2Upgrade python3-ceph-argparseUpgrade librados-develUpgrade ceph-fuseUpgrade ceph-mdsUpgrade python-rgwUpgrade python3-rados-debuginfoUpgrade rbd-nbdUpgrade python3-cephfsUpgrade librbd-develUpgrade ceph-debuginfo | Aug 19, 2020 | Jun 26, 2020 |
| Suse | — | Upgrade cephUpgrade ceph-prometheus-alertsUpgrade rados-objclass-develUpgrade librgw2Upgrade ceph-dashboard-e2eUpgrade python-cephfsUpgrade python3-rgwUpgrade librados2Upgrade ceph-mgr-diskprediction-cloudUpgrade ceph-mgr-k8seventsUpgrade ceph-mgr-dashboardUpgrade python3-rbdUpgrade ceph-fuseUpgrade librbd-develUpgrade rbd-fuseUpgrade python3-cephfsUpgrade libradospp-develUpgrade ceph-osdUpgrade ceph-testUpgrade libradosstriper1Upgrade python-rgwUpgrade ceph-mdsUpgrade ceph-mgr-diskprediction-localUpgrade python3-ceph-argparseUpgrade python-radosUpgrade ceph-resource-agentsUpgrade cephfs-shellUpgrade ceph-radosgwUpgrade rbd-mirrorUpgrade ceph-monUpgrade ceph-mgr-rookUpgrade ceph-commonUpgrade librbd1Upgrade libcephfs-develUpgrade libcephfs2Upgrade ceph-baseUpgrade ceph-mgr-sshUpgrade rbd-nbdUpgrade libradosstriper-develUpgrade python3-radosUpgrade python-rbdUpgrade ceph-mgrUpgrade librados-develUpgrade librgw-develUpgrade ceph-grafana-dashboards | Jun 26, 2020 | Jun 25, 2020 |
| Ubuntu | — | Upgrade ceph-baseUpgrade ceph-commonUpgrade ceph | Sep 23, 2020 | Jun 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub