High severity · published Jul 10, 2018
CVE-2018-10861
A flaw was found in the way ceph mon handles user requests
8.1
CVSS
3.2%
EPSS
No
On KEV
Description
A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CE
Ceph · Ceph
10.2.0; 10.2.1; 10.2.2; 10.2.3; 10.2.4; 10.2.5; +16 more · source: NVD
CS
Ceph Storage · Redhat
3 · source: NVD
CS
Ceph Storage Mon · Redhat
2; 3 · source: NVD
CS
Ceph Storage Osd · Redhat
2; 3 · source: NVD
DL
Debian Linux · Debian
9.0 · source: NVD
EL
Enterprise Linux Desktop · Redhat
7.0 · source: NVD
EL
Enterprise Linux Server · Redhat
7.0 · source: NVD
EL
Enterprise Linux Workstation · Redhat
7.0 · source: NVD
LE
Leap · Opensuse
15.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-10861
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-10861
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00100.html
Issue Tracking
http://tracker.ceph.com/issues/24838
Third Party Advisory
http://www.securityfocus.com/bid/104742
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2177
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2179
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2261
More from Ceph
9.1
CVE-2026-50152
Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users
8.9
CVE-2025-30156
Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery
8.8
CVE-2026-39944
Ceph: CephX AES Authentication error
8.1
CVE-2026-54330
Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation
7.5
CVE-2019-10222
A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests