A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage poo...

References

• advisory http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00100.html
• advisory http://www.securityfocus.com/bid/104742
• advisory https://access.redhat.com/errata/RHSA-2018:2177
• advisory https://access.redhat.com/errata/RHSA-2018:2179
• advisory https://access.redhat.com/errata/RHSA-2018:2261
• advisory https://access.redhat.com/errata/RHSA-2018:2274
• advisory https://www.debian.org/security/2018/dsa-4339
• patch https://bugzilla.redhat.com/show_bug.cgi?id=1593308
• patch https://github.com/ceph/ceph/commit/975528f632f73fbffa3f1fee304e3bbe3296cffc
• report http://tracker.ceph.com/issues/24838