CVE-2020-25677

2020-12-0800:02:25

CWE-312

redhat

www.cve.org

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.

CNA Affected

[
  {
    "product": "ceph-ansible",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "ceph-ansible-4.0.41"
      }
    ]
  }
]