A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. Ceph versions 3.x and 4.x are vulnerable to this issue.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Jun 26, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 26, 2020 |
| Centos_linux | — | Upgrade rbd-fuse-debuginfoUpgrade ceph-mon-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade python-cephfsUpgrade ceph-test-debuginfoUpgrade librgw2-debuginfoUpgrade python3-rados-debuginfoUpgrade librgw2Upgrade python-rgwUpgrade rbd-nbdUpgrade python-ceph-argparseUpgrade nfs-ganesha-rgwUpgrade python3-rgwUpgrade ceph-osd-debuginfoUpgrade ceph-fuse-debuginfoUpgrade ceph-medicUpgrade libradosstriper1Upgrade nfs-ganesha-proxyUpgrade python3-cephfs-debuginfoUpgrade ceph-radosgwUpgrade ceph-selinuxUpgrade ceph-common-debuginfoUpgrade ceph-mdsUpgrade nfs-ganesha-rados-graceUpgrade ceph-fuseUpgrade librbd-develUpgrade ceph-radosgw-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade python3-radosUpgrade ceph-mds-debuginfoUpgrade ceph-ansibleUpgrade nfs-ganesha-ceph-debuginfoUpgrade rbd-mirrorUpgrade nfs-ganesha-vfs-debuginfoUpgrade python3-cephfsUpgrade libcephfs2Upgrade nfs-ganesha-rados-grace-debuginfoUpgrade librados-devel-debuginfoUpgrade ceph-commonUpgrade librados-develUpgrade python3-rgw-debuginfoUpgrade python3-rbdUpgrade libradosstriper1-debuginfoUpgrade libcephfs-develUpgrade ceph-debuginfoUpgrade ceph-baseUpgrade ceph-base-debuginfoUpgrade librgw-develUpgrade nfs-ganesha-rgw-debuginfoUpgrade nfs-ganeshaUpgrade python3-rbd-debuginfoUpgrade cockpit-ceph-installerUpgrade ceph-mgr-debuginfoUpgrade ceph-debugsourceUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-cephUpgrade rbd-mirror-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade nfs-ganesha-vfsUpgrade rbd-nbd-debuginfoUpgrade ceph-grafana-dashboardsUpgrade libradospp-develUpgrade python3-ceph-argparseUpgrade libcephfs2-debuginfoUpgrade nfs-ganesha-selinux | Aug 19, 2020 | Jun 26, 2020 |
| Debian | — | Upgrade ceph | Aug 12, 2021 | Jun 26, 2020 |
| Freebsd | — | Upgrade ceph14 | Aug 18, 2020 | Aug 16, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade librbd1Upgrade python-rbdUpgrade ceph-commonUpgrade librados2Upgrade python-rados | May 25, 2022 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-radosUpgrade librados2Upgrade python-rbdUpgrade librbd1Upgrade ceph-common | Apr 26, 2022 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-radosUpgrade librbd1Upgrade librados2Upgrade python-rbdUpgrade ceph | Feb 2, 2021 | Jun 26, 2020 |
| Redhat_linux | — | Upgrade nfs-ganesha-debugsourceUpgrade ceph-osd-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade python3-rbdUpgrade ceph-base-debuginfoUpgrade nfs-ganeshaUpgrade ceph-common-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade ceph-radosgw-debuginfoUpgrade nfs-ganesha-vfsUpgrade ceph-mon-debuginfoUpgrade nfs-ganesha-rgwUpgrade ceph-selinuxUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-test-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade ceph-medicUpgrade ceph-mgr-debuginfoUpgrade cockpit-ceph-installerUpgrade ceph-mds-debuginfoUpgrade rbd-mirror-debuginfoUpgrade nfs-ganesha-cephUpgrade python-ceph-argparseUpgrade python3-rbd-debuginfoUpgrade python3-rgwUpgrade python-cephfsUpgrade python3-cephfs-debuginfoUpgrade ceph-baseUpgrade libradosstriper1Upgrade rbd-nbd-debuginfoUpgrade python3-rgw-debuginfoUpgrade libradospp-develUpgrade libcephfs2Upgrade ceph-debuginfoUpgrade librgw2Upgrade ceph-ansibleUpgrade librados-develUpgrade nfs-ganesha-rgw-debuginfoUpgrade ceph-radosgwUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade python-rgwUpgrade python3-rados-debuginfoUpgrade librbd-develUpgrade rbd-nbdUpgrade nfs-ganesha-proxy-debuginfoUpgrade ceph-commonUpgrade libcephfs-develUpgrade nfs-ganesha-vfs-debuginfoUpgrade python3-ceph-argparseUpgrade ceph-debugsourceUpgrade libcephfs2-debuginfoUpgrade python3-radosUpgrade librados-devel-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade rbd-mirrorUpgrade librgw-develUpgrade nfs-ganesha-proxyUpgrade nfs-ganesha-selinuxUpgrade ceph-grafana-dashboardsUpgrade python3-cephfsUpgrade rbd-fuse-debuginfoUpgrade libradosstriper1-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-fuse-debuginfoUpgrade ceph-fuseUpgrade ceph-mds | Aug 19, 2020 | Jun 26, 2020 |
| Suse | — | Upgrade ceph-mgr-dashboardUpgrade cephfs-shellUpgrade ceph-mgr-k8seventsUpgrade ceph-dashboard-e2eUpgrade python3-ceph-argparseUpgrade ceph-prometheus-alertsUpgrade ceph-mgr-diskprediction-cloudUpgrade rados-objclass-develUpgrade python3-cephfsUpgrade librgw2Upgrade libradosstriper1Upgrade ceph-resource-agentsUpgrade python3-rgwUpgrade python-cephfsUpgrade librados2Upgrade ceph-mgr-diskprediction-localUpgrade python-radosUpgrade python-rgwUpgrade ceph-testUpgrade rbd-fuseUpgrade python3-rbdUpgrade ceph-fuseUpgrade ceph-mdsUpgrade librbd-develUpgrade cephUpgrade ceph-radosgwUpgrade ceph-osdUpgrade libradospp-develUpgrade ceph-monUpgrade ceph-mgrUpgrade ceph-mgr-sshUpgrade librbd1Upgrade python-rbdUpgrade libcephfs-develUpgrade python3-radosUpgrade librgw-develUpgrade ceph-mgr-rookUpgrade ceph-grafana-dashboardsUpgrade rbd-mirrorUpgrade libradosstriper-develUpgrade ceph-commonUpgrade librados-develUpgrade libcephfs2Upgrade ceph-baseUpgrade rbd-nbd | Jun 26, 2020 | Jun 25, 2020 |
| Ubuntu | — | Upgrade ceph-baseUpgrade ceph-commonUpgrade ceph | Sep 23, 2020 | Jun 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub