QwikSec

Security Database

CVE

CWE

Training

CVE-2022-0670

Published: Jul 25, 2022

Modified: Aug 2, 2024

PUBLISHED

Description

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

Vendor	Product	Versions
n/a	Ceph	affected `Ceph v 17.2.2`

Weaknesses (CWE)

References

https://ceph.io/en/news/blog/2022/v17-2-2-quincy-released/

x_refsource_MISC

FEDORA-2022-67e0522b94

vendor-advisory

x_refsource_FEDORA

FEDORA-2022-6d129f14f2

vendor-advisory

x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.