CVE-2022-0670
A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.
Paquets affectés
Bitnami
ceph
[{"type":"SEMVER","events":[{"introduced":"15.0.0"},{"fixed":"15.2.17"},{"introduced":"16.0.0"},{"fixed":"16.2.10"},{"introduced":"17.0.0"},{"fixed":"17.2.2"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-0670 ceph Corrigé dans: 14.2.21-1+deb11u2
Références
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory github.com
- web ceph.io