A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. Ceph versions 3.x and 4.x are vulnerable to this issue.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Jun 26, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 26, 2020 |
| Centos_linux | — | Upgrade ceph-base-debuginfoUpgrade python3-rbdUpgrade ceph-commonUpgrade libcephfs2Upgrade python3-rgw-debuginfoUpgrade librgw-develUpgrade nfs-ganesha-selinuxUpgrade nfs-ganeshaUpgrade python3-ceph-argparseUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-grafana-dashboardsUpgrade libcephfs2-debuginfoUpgrade cockpit-ceph-installerUpgrade libcephfs-develUpgrade libradosstriper1-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade rbd-nbd-debuginfoUpgrade ceph-debuginfoUpgrade ceph-debugsourceUpgrade librados-develUpgrade libradospp-develUpgrade nfs-ganesha-rgw-debuginfoUpgrade ceph-mgr-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade librados-devel-debuginfoUpgrade nfs-ganesha-vfsUpgrade nfs-ganesha-cephUpgrade ceph-baseUpgrade rbd-mirror-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade nfs-ganesha-vfs-debuginfoUpgrade nfs-ganesha-rgwUpgrade ceph-selinuxUpgrade python-cephfsUpgrade nfs-ganesha-rados-urlsUpgrade python3-rgwUpgrade python3-rados-debuginfoUpgrade python-ceph-argparseUpgrade libradosstriper1Upgrade ceph-radosgwUpgrade ceph-medicUpgrade ceph-common-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade nfs-ganesha-proxyUpgrade ceph-test-debuginfoUpgrade ceph-fuseUpgrade librgw2Upgrade librbd-develUpgrade ceph-osd-debuginfoUpgrade rbd-fuse-debuginfoUpgrade python-rgwUpgrade ceph-mon-debuginfoUpgrade python3-cephfsUpgrade ceph-mds-debuginfoUpgrade python3-radosUpgrade python3-cephfs-debuginfoUpgrade librgw2-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade ceph-ansibleUpgrade ceph-fuse-debuginfoUpgrade rbd-mirrorUpgrade rbd-nbdUpgrade ceph-radosgw-debuginfoUpgrade ceph-mds | Aug 19, 2020 | Jun 26, 2020 |
| Debian | — | Upgrade ceph | Aug 12, 2021 | Jun 26, 2020 |
| Freebsd | — | Upgrade ceph14 | Aug 18, 2020 | Aug 16, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade librados2Upgrade ceph-commonUpgrade python-radosUpgrade python-rbdUpgrade librbd1 | May 25, 2022 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-rbdUpgrade ceph-commonUpgrade librbd1Upgrade librados2Upgrade python-rados | Apr 26, 2022 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade librados2Upgrade cephUpgrade python-rbdUpgrade python-radosUpgrade librbd1 | Feb 2, 2021 | Jun 26, 2020 |
| Redhat_linux | — | Upgrade ceph-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-radosgwUpgrade nfs-ganesha-proxy-debuginfoUpgrade ceph-mdsUpgrade ceph-ansibleUpgrade python3-cephfsUpgrade nfs-ganesha-selinuxUpgrade libradosstriper1-debuginfoUpgrade rbd-nbdUpgrade nfs-ganesha-proxyUpgrade ceph-fuse-debuginfoUpgrade ceph-commonUpgrade rbd-fuse-debuginfoUpgrade libcephfs2-debuginfoUpgrade ceph-grafana-dashboardsUpgrade ceph-fuseUpgrade python-rgwUpgrade librbd-develUpgrade libcephfs2Upgrade nfs-ganesha-rgw-debuginfoUpgrade librgw2-debuginfoUpgrade librgw-develUpgrade python3-rados-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade librgw2Upgrade nfs-ganesha-debuginfoUpgrade librados-develUpgrade python3-radosUpgrade librados-devel-debuginfoUpgrade ceph-debugsourceUpgrade rbd-mirrorUpgrade python3-ceph-argparseUpgrade libcephfs-develUpgrade cockpit-ceph-installerUpgrade nfs-ganesha-ceph-debuginfoUpgrade rbd-nbd-debuginfoUpgrade python3-rbdUpgrade ceph-mgr-debuginfoUpgrade ceph-base-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-selinuxUpgrade ceph-osd-debuginfoUpgrade ceph-common-debuginfoUpgrade python3-rgw-debuginfoUpgrade rbd-mirror-debuginfoUpgrade python-ceph-argparseUpgrade ceph-mds-debuginfoUpgrade python3-cephfs-debuginfoUpgrade libradosstriper1Upgrade python3-rgwUpgrade nfs-ganesha-rados-graceUpgrade ceph-test-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade ceph-baseUpgrade nfs-ganesha-vfsUpgrade nfs-ganesha-rgwUpgrade nfs-ganesha-rados-urlsUpgrade ceph-mon-debuginfoUpgrade ceph-medicUpgrade python3-rbd-debuginfoUpgrade nfs-ganesha-cephUpgrade nfs-ganeshaUpgrade libradospp-develUpgrade python-cephfsUpgrade nfs-ganesha-rados-grace-debuginfo | Aug 19, 2020 | Jun 26, 2020 |
| Suse | — | Upgrade ceph-prometheus-alertsUpgrade ceph-radosgwUpgrade ceph-osdUpgrade python3-cephfsUpgrade python-radosUpgrade ceph-resource-agentsUpgrade rbd-fuseUpgrade ceph-mgr-dashboardUpgrade ceph-mgr-diskprediction-localUpgrade ceph-mgr-k8seventsUpgrade cephfs-shellUpgrade python3-ceph-argparseUpgrade python-cephfsUpgrade ceph-fuseUpgrade librados2Upgrade rados-objclass-develUpgrade libradosstriper1Upgrade librgw2Upgrade python3-rgwUpgrade cephUpgrade ceph-mdsUpgrade libradospp-develUpgrade ceph-mgr-diskprediction-cloudUpgrade python-rgwUpgrade ceph-dashboard-e2eUpgrade ceph-testUpgrade python3-rbdUpgrade librbd-develUpgrade ceph-mgr-rookUpgrade ceph-grafana-dashboardsUpgrade libcephfs-develUpgrade rbd-mirrorUpgrade librgw-develUpgrade python3-radosUpgrade ceph-baseUpgrade libcephfs2Upgrade ceph-mgr-sshUpgrade rbd-nbdUpgrade librados-develUpgrade python-rbdUpgrade ceph-mgrUpgrade ceph-monUpgrade libradosstriper-develUpgrade ceph-commonUpgrade librbd1 | Jun 26, 2020 | Jun 25, 2020 |
| Ubuntu | — | Upgrade ceph-baseUpgrade ceph-commonUpgrade ceph | Sep 23, 2020 | Jun 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub