Back to search
CVE-2018-10861
Published: Jul 10, 2018
Modified: Sep 16, 2024
PUBLISHED
Description
A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.
| Vendor | Product | Versions |
|---|---|---|
Red Hat, Inc. | ceph | affected all versions in branches master, mimic, luminous and jewel |
Weaknesses (CWE)
References
RHSA-2018:2261
vendor-advisory
x_refsource_REDHAT
RHSA-2018:2177
vendor-advisory
x_refsource_REDHAT
RHSA-2018:2179
vendor-advisory
x_refsource_REDHAT
RHSA-2018:2274
vendor-advisory
x_refsource_REDHAT
104742
vdb-entry
x_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=1593308
x_refsource_CONFIRM
https://github.com/ceph/ceph/commit/975528f632f73fbffa3f1fee304e3bbe3296cffc
x_refsource_CONFIRM
DSA-4339
vendor-advisory
x_refsource_DEBIAN
http://tracker.ceph.com/issues/24838
x_refsource_CONFIRM
openSUSE-SU-2019:1284
vendor-advisory
x_refsource_SUSE
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now