Ceph

Ceph-deploy

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 0.05%
  • Published 16.06.2015 16:59:02
  • Last modified 12.04.2025 10:46:40

ceph-deploy before 1.5.23 uses weak permissions (644) for ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.

  • EPSS 0.05%
  • Published 08.06.2015 14:59:14
  • Last modified 12.04.2025 10:46:40

The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.