Login Request a demo
CE
Product
Ceph
by Linuxfoundation · last CVE Jul 25, 2022
8
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 4Medium 3Low 0
Severity
All severities8Critical1High4Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ceph to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-0670
9.1
1%
Jul 25
A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system
Affected: 15.0.0 before 15.2.17; 16.0.0 before 16.2.10; 17.0.0 before 17.2.2
CVE-2020-10736
8.0
1%
Jun 22
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in…
Affected: 15.2.0 before 15.2.2
CVE-2020-12059
7.5
2%
Apr 22
An issue was discovered in Ceph through 13.2.9
Affected: through 13.2.9
CVE-2020-1699
7.5
2%
Apr 21
A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions 14.2.7 and 15.1.0
Affected: 14.2.5; 14.2.6; 15.0.0
CVE-2021-20288
7.2
2%
Apr 15
An authentication flaw was found in ceph in versions before 14.2.20
Affected: before 14.2.21
CVE-2020-1759
6.8
2%
Apr 13
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the…
Affected: before 14.2.21
CVE-2020-10753
6.5
1%
Jun 26
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway)
Affected: before 14.2.21
CVE-2020-1760
6.1
2%
Apr 23
A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3
Affected: before 14.2.21
Showing 8