CVE-2020-1699
A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions 14.2.7 and 15.1.0. An unauthenticated attacker could use this flaw to cause information disclosure on the host machine running the Ceph dashboard.
影響パッケージ
Bitnami
ceph
[{"type":"SEMVER","events":[{"introduced":"14.2.5"},{"last_affected":"14.2.5"},{"introduced":"14.2.6"},{"last_affected":"14.2.6"},{"introduced":"15.0.0"},{"last_affected":"15.0.0"}]}]
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2020-1699 ceph 修正版: 14.2.6-4
参照URL
- advisory bugzilla.redhat.com
- web nvd.nist.gov