A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Jul 25, 2022 |
| Centos_linux | — | Upgrade pam_oath-debuginfoUpgrade nfs-ganesha-proxyUpgrade pskctool-debuginfoUpgrade ceph-resource-agentsUpgrade nfs-ganesha-debugsourceUpgrade ceph-radosgwUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-mdsUpgrade ceph-fuse-debuginfoUpgrade ceph-fuseUpgrade libradosstriper1Upgrade cephadmUpgrade oathtool-debuginfoUpgrade librgw2Upgrade python3-rbd-debuginfoUpgrade ceph-selinuxUpgrade ceph-immutable-object-cacheUpgrade nfs-ganesha-debuginfoUpgrade ceph-mon-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade ceph-mibUpgrade leveldb-debugsourceUpgrade libradosstriper1-debuginfoUpgrade liboathUpgrade libunwind-debugsourceUpgrade ceph-common-debuginfoUpgrade libunwindUpgrade liboath-debuginfoUpgrade ceph-osd-debuginfoUpgrade librbd-develUpgrade python3-rgw-debuginfoUpgrade rbd-mirrorUpgrade nfs-ganeshaUpgrade gperftools-libs-debuginfoUpgrade rbd-nbdUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade oath-toolkit-debuginfoUpgrade leveldbUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-rados-graceUpgrade oath-toolkit-debugsourceUpgrade python3-radosUpgrade python3-ceph-commonUpgrade cephfs-topUpgrade nfs-ganesha-vfsUpgrade ceph-mds-debuginfoUpgrade ceph-ansibleUpgrade nfs-ganesha-rados-urlsUpgrade ceph-test-debuginfoUpgrade gperftools-debugsourceUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-base-debuginfoUpgrade nfs-ganesha-selinuxUpgrade libradospp-develUpgrade ceph-radosgw-debuginfoUpgrade cephadm-ansibleUpgrade ceph-mgr-debuginfoUpgrade python3-rbdUpgrade python3-rgwUpgrade libcephfs-develUpgrade libpskc-debuginfoUpgrade nfs-ganesha-rgwUpgrade nfs-ganesha-proxy-debuginfoUpgrade librgw-develUpgrade librados-devel-debuginfoUpgrade ceph-grafana-dashboardsUpgrade python3-cephfs-debuginfoUpgrade python3-ceph-argparseUpgrade libunwind-debuginfoUpgrade libcephfs2Upgrade ceph-baseUpgrade nfs-ganesha-rgw-debuginfoUpgrade cephfs-mirrorUpgrade python3-cephfsUpgrade ceph-immutable-object-cache-debuginfoUpgrade leveldb-debuginfoUpgrade rbd-mirror-debuginfoUpgrade rbd-fuse-debuginfoUpgrade python3-rados-debuginfoUpgrade gperftools-libsUpgrade librados-develUpgrade rbd-nbd-debuginfoUpgrade libcephsqlite-debuginfoUpgrade ceph-commonUpgrade librgw2-debuginfoUpgrade ceph-debugsourceUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade libcephfs2-debuginfo | Aug 11, 2022 | Jul 25, 2022 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Jul 25, 2022 |
| Redhat_linux | — | Upgrade ceph-baseUpgrade ceph-commonUpgrade nfs-ganesha-proxy-debuginfoUpgrade libcephfs-develUpgrade nfs-ganesha-ceph-debuginfoUpgrade rbd-nbd-debuginfoUpgrade libcephfs2Upgrade ceph-radosgw-debuginfoUpgrade python3-cephfs-debuginfoUpgrade libcephfs2-debuginfoUpgrade pam_oath-debuginfoUpgrade cephfs-mirrorUpgrade python3-rgwUpgrade rbd-mirror-debuginfoUpgrade gperftools-debugsourceUpgrade nfs-ganesha-rgwUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-vfs-debuginfoUpgrade librados-develUpgrade ceph-grafana-dashboardsUpgrade python3-ceph-commonUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade oathtool-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade gperftools-libsUpgrade gperftools-libs-debuginfoUpgrade ceph-debugsourceUpgrade python3-cephfsUpgrade python3-ceph-argparseUpgrade python3-rados-debuginfoUpgrade libunwind-debuginfoUpgrade librados-devel-debuginfoUpgrade libunwindUpgrade rbd-fuse-debuginfoUpgrade leveldb-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade librgw-develUpgrade python3-radosUpgrade liboath-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade librgw2-debuginfoUpgrade python3-rbd-debuginfoUpgrade nfs-ganeshaUpgrade ceph-base-debuginfoUpgrade libradosstriper1Upgrade ceph-selinuxUpgrade ceph-mibUpgrade leveldb-debugsourceUpgrade rbd-mirrorUpgrade pskctool-debuginfoUpgrade libradospp-develUpgrade cephfs-topUpgrade leveldbUpgrade libpskc-debuginfoUpgrade liboathUpgrade librgw2Upgrade ceph-resource-agentsUpgrade librbd-develUpgrade ceph-common-debuginfoUpgrade ceph-immutable-object-cacheUpgrade oath-toolkit-debuginfoUpgrade nfs-ganesha-cephUpgrade ceph-mgr-debuginfoUpgrade rbd-nbdUpgrade nfs-ganesha-rados-graceUpgrade nfs-ganesha-vfsUpgrade ceph-radosgwUpgrade libcephsqlite-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade libunwind-debugsourceUpgrade ceph-fuse-debuginfoUpgrade cephadmUpgrade ceph-mdsUpgrade ceph-mds-debuginfoUpgrade libradosstriper1-debuginfoUpgrade ceph-ansibleUpgrade nfs-ganesha-debuginfoUpgrade ceph-osd-debuginfoUpgrade nfs-ganesha-proxyNo solution existsUpgrade oath-toolkit-debugsourceUpgrade ceph-test-debuginfoUpgrade python3-rgw-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade cephadm-ansibleUpgrade ceph-fuseUpgrade python3-rbdUpgrade ceph-mon-debuginfo | Aug 11, 2022 | Jul 25, 2022 |
| Suse | — | Upgrade python3-rgwUpgrade ceph-mgr-dashboardUpgrade ceph-monUpgrade ceph-grafana-dashboardsUpgrade ceph-fuseUpgrade libcephfs2Upgrade ceph-mgr-k8seventsUpgrade librados-develUpgrade ceph-mgr-rookUpgrade python3-cephfsUpgrade python3-ceph-commonUpgrade cephfs-mirrorUpgrade python3-radosUpgrade libcephsqlite-develUpgrade cephfs-topUpgrade rbd-fuseUpgrade librados2Upgrade libcephfs-develUpgrade ceph-commonUpgrade ceph-immutable-object-cacheUpgrade ceph-mdsUpgrade librgw2Upgrade rados-objclass-develUpgrade ceph-radosgwUpgrade librbd1Upgrade librgw-develUpgrade librbd-develUpgrade cephadmUpgrade ceph-testUpgrade ceph-osdUpgrade ceph-mgr-diskprediction-localUpgrade ceph-mgrUpgrade rbd-nbdUpgrade cephUpgrade python3-rbdUpgrade libcephsqliteUpgrade ceph-prometheus-alertsUpgrade ceph-mgr-cephadmUpgrade python3-ceph-argparseUpgrade ceph-mgr-modules-coreUpgrade libradospp-develUpgrade ceph-baseUpgrade cephfs-shellUpgrade rbd-mirror | Mar 28, 2023 | Jul 25, 2022 |
| Ubuntu | — | Upgrade ceph-commonUpgrade ceph-baseUpgrade ceph | May 10, 2023 | Jul 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub