A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Jul 25, 2022 |
| Centos_linux | — | Upgrade nfs-ganesha-rados-grace-debuginfoUpgrade nfs-ganesha-selinuxUpgrade librgw2-debuginfoUpgrade ceph-commonUpgrade python3-ceph-argparseUpgrade libcephfs2Upgrade ceph-debugsourceUpgrade python3-rados-debuginfoUpgrade gperftools-libsUpgrade libcephfs2-debuginfoUpgrade gperftools-debugsourceUpgrade nfs-ganesha-proxy-debuginfoUpgrade ceph-grafana-dashboardsUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-base-debuginfoUpgrade rbd-mirror-debuginfoUpgrade python3-rgwUpgrade cephadm-ansibleUpgrade nfs-ganesha-rgw-debuginfoUpgrade cephfs-mirrorUpgrade python3-rbdUpgrade python3-cephfsUpgrade libradospp-develUpgrade libcephfs-develUpgrade leveldb-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-mgr-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade rbd-fuse-debuginfoUpgrade libunwind-debuginfoUpgrade python3-cephfs-debuginfoUpgrade nfs-ganesha-rgwUpgrade librgw-develUpgrade librados-devel-debuginfoUpgrade libpskc-debuginfoUpgrade librados-develUpgrade rbd-nbd-debuginfoUpgrade libcephsqlite-debuginfoUpgrade ceph-baseUpgrade nfs-ganesha-ceph-debuginfoUpgrade nfs-ganesha-proxyUpgrade ceph-mdsUpgrade pskctool-debuginfoUpgrade python3-rbd-debuginfoUpgrade libunwind-debugsourceUpgrade ceph-selinuxUpgrade ceph-resource-agentsUpgrade nfs-ganesha-vfsUpgrade rbd-nbdUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade ceph-mds-debuginfoUpgrade libradosstriper1-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade ceph-mibUpgrade nfs-ganesha-rados-urlsUpgrade ceph-mon-debuginfoUpgrade oathtool-debuginfoUpgrade cephadmUpgrade ceph-fuse-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade ceph-common-debuginfoUpgrade ceph-test-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade oath-toolkit-debuginfoUpgrade oath-toolkit-debugsourceUpgrade nfs-ganesha-cephUpgrade ceph-fuseUpgrade leveldb-debugsourceUpgrade libradosstriper1Upgrade librgw2Upgrade gperftools-libs-debuginfoUpgrade liboathUpgrade nfs-ganesha-debuginfoUpgrade ceph-ansibleUpgrade liboath-debuginfoUpgrade leveldbUpgrade python3-radosUpgrade nfs-ganeshaUpgrade libunwindUpgrade cephfs-topUpgrade librbd-develUpgrade python3-ceph-commonUpgrade ceph-immutable-object-cacheUpgrade ceph-osd-debuginfoUpgrade pam_oath-debuginfoUpgrade python3-rgw-debuginfoUpgrade rbd-mirrorUpgrade ceph-radosgw | Aug 11, 2022 | Jul 25, 2022 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Jul 25, 2022 |
| Redhat_linux | — | Upgrade ceph-immutable-object-cache-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade oathtool-debuginfoUpgrade python3-cephfs-debuginfoUpgrade gperftools-debugsourceUpgrade cephfs-mirrorUpgrade ceph-grafana-dashboardsUpgrade python3-radosUpgrade gperftools-libsUpgrade python3-rgwUpgrade nfs-ganesha-proxy-debuginfoUpgrade ceph-baseUpgrade nfs-ganesha-ceph-debuginfoUpgrade rbd-mirror-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade nfs-ganesha-selinuxUpgrade ceph-radosgw-debuginfoUpgrade librgw-develUpgrade libcephfs-develUpgrade python3-rados-debuginfoUpgrade libcephfs2-debuginfoUpgrade gperftools-libs-debuginfoUpgrade ceph-commonUpgrade leveldb-debuginfoUpgrade libunwind-debuginfoUpgrade ceph-debugsourceUpgrade libcephfs2Upgrade librados-develUpgrade rbd-nbd-debuginfoUpgrade nfs-ganesha-rgwUpgrade rbd-fuse-debuginfoUpgrade python3-ceph-commonUpgrade python3-ceph-argparseUpgrade libunwindUpgrade librados-devel-debuginfoUpgrade pam_oath-debuginfoUpgrade python3-cephfsUpgrade nfs-ganesha-rgw-debuginfoUpgrade python3-rbd-debuginfoUpgrade oath-toolkit-debugsourceUpgrade rbd-mirrorNo solution existsUpgrade cephfs-topUpgrade nfs-ganesha-proxyUpgrade nfs-ganesha-debuginfoUpgrade python3-rgw-debuginfoUpgrade ceph-fuse-debuginfoUpgrade cephadm-ansibleUpgrade ceph-mibUpgrade nfs-ganesha-rados-graceUpgrade cephadmUpgrade ceph-radosgwUpgrade libradosstriper1Upgrade python3-rbdUpgrade libradosstriper1-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-osd-debuginfoUpgrade leveldbUpgrade libunwind-debugsourceUpgrade liboathUpgrade ceph-mds-debuginfoUpgrade ceph-immutable-object-cacheUpgrade librbd-develUpgrade ceph-resource-agentsUpgrade librgw2Upgrade ceph-common-debuginfoUpgrade libpskc-debuginfoUpgrade leveldb-debugsourceUpgrade ceph-fuseUpgrade ceph-selinuxUpgrade oath-toolkit-debuginfoUpgrade rbd-nbdUpgrade ceph-ansibleUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade ceph-mgr-debuginfoUpgrade ceph-mdsUpgrade pskctool-debuginfoUpgrade librgw2-debuginfoUpgrade liboath-debuginfoUpgrade libcephsqlite-debuginfoUpgrade ceph-test-debuginfoUpgrade nfs-ganesha-vfsUpgrade cephfs-mirror-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade nfs-ganesha-debugsourceUpgrade libradospp-develUpgrade ceph-base-debuginfoUpgrade nfs-ganesha | Aug 11, 2022 | Jul 25, 2022 |
| Suse | — | Upgrade libcephsqliteUpgrade ceph-mgr-modules-coreUpgrade rbd-nbdUpgrade ceph-prometheus-alertsUpgrade ceph-testUpgrade ceph-mgr-diskprediction-localUpgrade ceph-mgr-cephadmUpgrade python3-ceph-argparseUpgrade cephfs-shellUpgrade ceph-osdUpgrade ceph-mgrUpgrade ceph-baseUpgrade cephUpgrade python3-rbdUpgrade rbd-mirrorUpgrade libradospp-develUpgrade librados2Upgrade cephadmUpgrade ceph-mdsUpgrade ceph-mgr-rookUpgrade librgw-develUpgrade librbd1Upgrade librgw2Upgrade python3-cephfsUpgrade librados-develUpgrade rados-objclass-develUpgrade cephfs-topUpgrade librbd-develUpgrade rbd-fuseUpgrade ceph-fuseUpgrade python3-rgwUpgrade ceph-radosgwUpgrade ceph-mgr-dashboardUpgrade ceph-grafana-dashboardsUpgrade ceph-monUpgrade ceph-commonUpgrade ceph-mgr-k8seventsUpgrade libcephfs2Upgrade python3-radosUpgrade python3-ceph-commonUpgrade libcephfs-develUpgrade ceph-immutable-object-cacheUpgrade cephfs-mirrorUpgrade libcephsqlite-devel | Mar 28, 2023 | Jul 25, 2022 |
| Ubuntu | — | Upgrade ceph-baseUpgrade cephUpgrade ceph-common | May 10, 2023 | Jul 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub