CVE-2022-0670
A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system...
Original description
The description as published by the source.
A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.
Affected packages
Bitnami
ceph
[{"type":"SEMVER","events":[{"introduced":"15.0.0"},{"fixed":"15.2.17"},{"introduced":"16.0.0"},{"fixed":"16.2.10"},{"introduced":"17.0.0"},{"fixed":"17.2.2"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-0670 ceph Fixed in: 14.2.21-1+deb11u2
References
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory github.com
- web ceph.io