Cross-origin Resource Sharing Policy Bypass

2019-01-1509:14:40

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.007 Low

EPSS

Percentile

80.0%

JSON

Red Hat Ceph Storage is found to be vulnerable to cross-origin resource sharing policy bypass. The vulnerability is due to the setting which allows origin on a bucket, opening up a loophole for an attacker to use malicious cross-origin HTTP request to launch denial of service.

CPENameOperatorVersion
cepheq0.94.3__3.el7cp
cepheq0.94.5__9.el7cp
cepheq0.94.3__6.el7cp
cepheq0.94.5__14.el7cp
cepheq0.94.1__13.el7cp
cepheq10.2.2__38.el7cp
cepheq0.94.5__13.el7cp
cepheq0.94.5__12.el7cp
cepheq0.80.1__5.el7ost
cepheq0.94.1__15.el7cp

Name	Operator	Version
ceph	eq	0.94.3__3.el7cp
ceph	eq	0.94.5__9.el7cp
ceph	eq	0.94.3__6.el7cp
ceph	eq	0.94.5__14.el7cp
ceph	eq	0.94.1__13.el7cp
ceph	eq	10.2.2__38.el7cp
ceph	eq	0.94.5__13.el7cp
ceph	eq	0.94.5__12.el7cp
ceph	eq	0.80.1__5.el7ost
ceph	eq	0.94.1__15.el7cp