Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:30259
HistoryApr 29, 2021 - 12:17 p.m.

Authorization Bypass

2021-04-2912:17:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

0.0004 Low

EPSS

Percentile

12.8%

ceph:edge is vulnerable to authorization bypass. ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.