Privilege Escalation

2020-12-0308:40:56

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

43.7%

JSON

cephx is vulnerable to privilege escalation attacks. This is because cephx authentication protocol does not verify ceph clients correctly. An attacker who has access to the ceph cluster network is able to sniff packets on the network.

CPENameOperatorVersion
cepheq14.2.10__1.el7
cepheq0.80.1__5.el7ost
cepheq12.2.0__0.el7
cepheq12.2.5__59.el7cp
cepheq12.2.5__0.el7
cepheq10.2.7__32.el7cp
cepheq10.2.5__37.el7cp
cepheq12.2.1__45.el7cp
cepheq0.94.1__15.el7cp
cepheq12.2.4__42.el7cp

Name	Operator	Version
ceph	eq	14.2.10__1.el7
ceph	eq	0.80.1__5.el7ost
ceph	eq	12.2.0__0.el7
ceph	eq	12.2.5__59.el7cp
ceph	eq	12.2.5__0.el7
ceph	eq	10.2.7__32.el7cp
ceph	eq	10.2.5__37.el7cp
ceph	eq	12.2.1__45.el7cp
ceph	eq	0.94.1__15.el7cp
ceph	eq	12.2.4__42.el7cp