vulnerability
Ubuntu: (Multiple Advisories) (CVE-2020-10736): Ceph vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:A/AC:L/Au:S/C:P/I:P/A:P) | Jun 22, 2020 | Jan 29, 2021 | Nov 7, 2024 |
Severity
5
CVSS
(AV:A/AC:L/Au:S/C:P/I:P/A:P)
Published
Jun 22, 2020
Added
Jan 29, 2021
Modified
Nov 7, 2024
Description
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.
Solution(s)
ubuntu-upgrade-cephubuntu-upgrade-ceph-baseubuntu-upgrade-ceph-common
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.