The Ceph Project vulnerabilities

4 published CVEs name The Ceph Project among the affected products.

Critical 0High 2Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2020-1699
A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions…
The Ceph Project · ceph
High7.5
CVE-2020-1759
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure…
The Ceph Project · ceph
Medium6.4
CVE-2019-10222
A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW…
The Ceph Project · ceph
High7.5
CVE-2018-16889
Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption key information in log files via…
The Ceph Project · ceph
Medium5.5