A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python3-cephfs-debuginfoUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-debugsourceUpgrade nfs-ganesha-ceph-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade ceph-baseUpgrade rbd-nbdUpgrade rbd-mirrorUpgrade python3-rgw-debuginfoUpgrade python3-cephfsUpgrade ceph-osd-debuginfoUpgrade libradospp-develUpgrade librbd-develUpgrade libntirpc-debuginfoUpgrade librgw2Upgrade python-ceph-argparseUpgrade ceph-selinuxUpgrade python-cephfsUpgrade ceph-mon-debuginfoUpgrade python3-rbdUpgrade ceph-fuseUpgrade python3-rgwUpgrade nfs-ganesha-rados-urlsUpgrade cockpit-ceph-installerUpgrade ceph-radosgw-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade nfs-ganeshaUpgrade rbd-mirror-debuginfoUpgrade ceph-debugsourceUpgrade ceph-base-debuginfoUpgrade nfs-ganesha-rgwUpgrade ceph-mdsUpgrade python3-ceph-argparseUpgrade ceph-test-debuginfoUpgrade nfs-ganesha-vfsUpgrade python-rgwUpgrade libradosstriper1Upgrade ceph-mgr-debuginfoUpgrade ceph-common-debuginfoUpgrade python3-rados-debuginfoUpgrade libradosstriper1-debuginfoUpgrade ceph-ansibleUpgrade ceph-radosgwUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade nfs-ganesha-proxyUpgrade libntirpc-debugsourceUpgrade librados-develUpgrade librados-devel-debuginfoUpgrade libntirpcUpgrade nfs-ganesha-proxy-debuginfoUpgrade librgw-develUpgrade nfs-ganesha-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-grafana-dashboardsUpgrade ansible-runner-serviceUpgrade ceph-debuginfoUpgrade rbd-fuse-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade ceph-mds-debuginfoUpgrade nfs-ganesha-selinuxUpgrade libcephfs-develUpgrade libcephfs2Upgrade rbd-nbd-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade python3-radosUpgrade libcephfs2-debuginfoUpgrade ceph-fuse-debuginfoUpgrade ceph-commonUpgrade python3-rbd-debuginfo | Jan 14, 2021 | Dec 8, 2020 |
| Redhat_linux | — | Upgrade python-ceph-argparseUpgrade ceph-mon-debuginfoUpgrade nfs-ganesha-proxyUpgrade python-rgwUpgrade python3-rados-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade python3-rgwUpgrade ceph-fuseUpgrade ceph-osd-debuginfoUpgrade librgw2Upgrade ceph-commonUpgrade python3-cephfs-debuginfoUpgrade ceph-common-debuginfoUpgrade librbd-develUpgrade python3-radosUpgrade python3-ceph-argparseUpgrade ceph-fuse-debuginfoUpgrade ceph-radosgwUpgrade ceph-ansibleUpgrade ceph-test-debuginfoUpgrade python-cephfsUpgrade python3-cephfsUpgrade ceph-debugsourceUpgrade nfs-ganesha-rados-urlsUpgrade ceph-selinuxUpgrade nfs-ganesha-selinuxUpgrade ceph-mdsUpgrade ansible-runner-serviceUpgrade nfs-ganesha-rados-graceUpgrade libradosstriper1Upgrade libntirpc-debugsourceUpgrade librgw2-debuginfoUpgrade rbd-nbdUpgrade rbd-fuse-debuginfoUpgrade nfs-ganesha-rgwUpgrade python3-rbd-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade cockpit-ceph-installerUpgrade nfs-ganesha-proxy-debuginfoUpgrade librgw-develUpgrade nfs-ganesha-rgw-debuginfoUpgrade rbd-mirrorUpgrade libntirpc-debuginfoUpgrade nfs-ganesha-vfsUpgrade librados-devel-debuginfoUpgrade librados-develUpgrade libcephfs-develUpgrade python3-rbdUpgrade rbd-nbd-debuginfoUpgrade nfs-ganesha-cephUpgrade libradospp-develUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-mds-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade libradosstriper1-debuginfoUpgrade nfs-ganeshaUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade ceph-mgr-debuginfoUpgrade ceph-grafana-dashboardsUpgrade ceph-base-debuginfoUpgrade rbd-mirror-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade libcephfs2Upgrade ceph-baseUpgrade python3-rgw-debuginfoUpgrade libntirpcUpgrade ceph-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade libcephfs2-debuginfo | Jan 14, 2021 | Dec 8, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub