A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. Ceph versions 3.x and 4.x are vulnerable to this issue.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ceph16Upgrade ceph | Aug 22, 2024 | Jun 26, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 26, 2020 |
| Centos_linux | — | Upgrade ceph-grafana-dashboardsUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade libradospp-develUpgrade python3-ceph-argparseUpgrade nfs-ganesha-cephUpgrade rbd-nbd-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade ceph-commonUpgrade libcephfs2Upgrade python3-rbdUpgrade librados-develUpgrade nfs-ganesha-vfsUpgrade libcephfs2-debuginfoUpgrade ceph-baseUpgrade ceph-debuginfoUpgrade ceph-base-debuginfoUpgrade libcephfs-develUpgrade librados-devel-debuginfoUpgrade nfs-ganeshaUpgrade librgw-develUpgrade libradosstriper1-debuginfoUpgrade nfs-ganesha-selinuxUpgrade ceph-mgr-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-debugsourceUpgrade rbd-mirror-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade cockpit-ceph-installerUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade python3-rgw-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-mds-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade python3-cephfsUpgrade nfs-ganesha-rados-graceUpgrade ceph-osd-debuginfoUpgrade ceph-fuse-debuginfoUpgrade ceph-mdsUpgrade rbd-nbdUpgrade python3-cephfs-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-selinuxUpgrade nfs-ganesha-proxyUpgrade ceph-ansibleUpgrade python3-radosUpgrade ceph-mon-debuginfoUpgrade librgw2-debuginfoUpgrade rbd-fuse-debuginfoUpgrade python-rgwUpgrade python-cephfsUpgrade nfs-ganesha-rados-urlsUpgrade rbd-mirrorUpgrade librgw2Upgrade librbd-develUpgrade ceph-test-debuginfoUpgrade ceph-fuseUpgrade python3-rgwUpgrade python3-rados-debuginfoUpgrade python-ceph-argparseUpgrade nfs-ganesha-rgwUpgrade libradosstriper1Upgrade ceph-radosgwUpgrade ceph-medicUpgrade ceph-common-debuginfo | Aug 19, 2020 | Jun 26, 2020 |
| Debian | — | Upgrade ceph | Aug 12, 2021 | Jun 26, 2020 |
| Freebsd | — | Upgrade ceph14 | Aug 18, 2020 | Aug 16, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-radosUpgrade ceph-commonUpgrade librados2Upgrade python-rbdUpgrade librbd1 | May 25, 2022 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-radosUpgrade librados2Upgrade librbd1Upgrade python-rbdUpgrade ceph-common | Apr 26, 2022 | Jun 26, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cephUpgrade python-rbdUpgrade librados2Upgrade python-radosUpgrade librbd1 | Feb 2, 2021 | Jun 26, 2020 |
| Redhat_linux | — | Upgrade python-cephfsUpgrade ceph-baseUpgrade nfs-ganesha-rados-urlsUpgrade ceph-osd-debuginfoUpgrade nfs-ganesha-cephUpgrade libradosstriper1Upgrade cockpit-ceph-installerUpgrade nfs-ganesha-rados-graceUpgrade ceph-test-debuginfoUpgrade ceph-base-debuginfoUpgrade rbd-nbd-debuginfoUpgrade python-ceph-argparseUpgrade ceph-common-debuginfoUpgrade libradospp-develUpgrade python3-cephfs-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade python3-rgw-debuginfoUpgrade rbd-mirror-debuginfoUpgrade ceph-selinuxUpgrade nfs-ganesha-ceph-debuginfoUpgrade nfs-ganeshaUpgrade ceph-medicUpgrade ceph-mgr-debuginfoUpgrade ceph-mds-debuginfoUpgrade python3-rgwUpgrade nfs-ganesha-vfsUpgrade nfs-ganesha-rgwUpgrade nfs-ganesha-debugsourceUpgrade python3-rbd-debuginfoUpgrade python3-rbdUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade ceph-mon-debuginfoUpgrade python-rgwUpgrade ceph-mdsUpgrade librbd-develUpgrade rbd-nbdUpgrade ceph-grafana-dashboardsUpgrade python3-rados-debuginfoUpgrade ceph-commonUpgrade librados-develUpgrade librgw2-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade librgw2Upgrade rbd-mirrorUpgrade nfs-ganesha-proxy-debuginfoUpgrade librgw-develUpgrade ceph-radosgwUpgrade rbd-fuse-debuginfoUpgrade python3-cephfsUpgrade nfs-ganesha-debuginfoUpgrade libcephfs2-debuginfoUpgrade ceph-debuginfoUpgrade ceph-fuseUpgrade ceph-fuse-debuginfoUpgrade nfs-ganesha-proxyUpgrade ceph-ansibleUpgrade librados-devel-debuginfoUpgrade ceph-debugsourceUpgrade python3-radosUpgrade python3-ceph-argparseUpgrade nfs-ganesha-vfs-debuginfoUpgrade libcephfs-develUpgrade libcephfs2Upgrade nfs-ganesha-selinuxUpgrade libradosstriper1-debuginfo | Aug 19, 2020 | Jun 26, 2020 |
| Suse | — | Upgrade ceph-commonUpgrade librgw-develUpgrade python3-radosUpgrade ceph-grafana-dashboardsUpgrade ceph-monUpgrade ceph-mgr-rookUpgrade libradosstriper-develUpgrade ceph-mgrUpgrade libcephfs-develUpgrade rbd-mirrorUpgrade libcephfs2Upgrade python-rbdUpgrade librados-develUpgrade ceph-mgr-sshUpgrade librbd1Upgrade rbd-nbdUpgrade ceph-baseUpgrade ceph-radosgwUpgrade libradospp-develUpgrade python3-ceph-argparseUpgrade python3-cephfsUpgrade ceph-mgr-dashboardUpgrade ceph-mgr-diskprediction-localUpgrade python-radosUpgrade python-rgwUpgrade ceph-mdsUpgrade ceph-mgr-diskprediction-cloudUpgrade ceph-dashboard-e2eUpgrade cephfs-shellUpgrade ceph-mgr-k8seventsUpgrade ceph-prometheus-alertsUpgrade python3-rbdUpgrade librgw2Upgrade libradosstriper1Upgrade ceph-osdUpgrade cephUpgrade ceph-fuseUpgrade librbd-develUpgrade rados-objclass-develUpgrade rbd-fuseUpgrade python-cephfsUpgrade python3-rgwUpgrade ceph-testUpgrade librados2Upgrade ceph-resource-agents | Jun 26, 2020 | Jun 25, 2020 |
| Ubuntu | — | Upgrade ceph-baseUpgrade cephUpgrade ceph-common | Sep 23, 2020 | Jun 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub