CVE-2020-25677
Fixed in a distro release EPSS <1%
A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.
Products: ceph-ansible, redhat ceph_storage
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat ceph storage 4 | ceph | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-ansible | 0:4.0.41-1.el8cp |
| Red Hat ceph storage 4 | ceph-ansible | 0:4.0.41-1.el7cp |
| Red Hat ceph storage 4 | ceph-base | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-base | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-base-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-common | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-common | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-common-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-debuginfo | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-debugsource | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-fuse | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-fuse | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-fuse-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-grafana-dashboards | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-grafana-dashboards | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-mds | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-mds | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-mds-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-mgr | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-mgr | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-mgr-dashboard | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-mgr-dashboard | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-mgr-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-mgr-diskprediction-local | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-mgr-diskprediction-local | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-mgr-k8sevents | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-mgr-k8sevents | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-mgr-rook | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-mgr-rook | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-mon | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-mon | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-mon-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-osd | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-osd | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-osd-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-radosgw | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-radosgw | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-radosgw-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-selinux | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-selinux | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-test | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | ceph-test | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | ceph-test-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | libcephfs-devel | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | libcephfs-devel | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | libcephfs2 | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | libcephfs2 | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | libcephfs2-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | librados-devel | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | librados-devel | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | librados-devel-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | librados2 | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | librados2 | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | librados2-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | libradospp-devel | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | libradospp-devel | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | libradosstriper1 | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | libradosstriper1 | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | libradosstriper1-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | librbd-devel | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | librbd-devel | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | librbd1 | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | librbd1 | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | librbd1-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | librgw-devel | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | librgw-devel | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | librgw2 | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | librgw2 | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | librgw2-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | python-ceph-argparse | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | python-cephfs | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | python-rados | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | python-rbd | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | python-rgw | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | python3-ceph-argparse | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | python3-cephfs | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | python3-cephfs-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | python3-rados | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | python3-rados-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | python3-rbd | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | python3-rbd-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | python3-rgw | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | python3-rgw-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | rbd-fuse-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | rbd-mirror | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | rbd-mirror | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | rbd-mirror-debuginfo | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | rbd-nbd | 2:14.2.11-95.el8cp |
| Red Hat ceph storage 4 | rbd-nbd | 2:14.2.11-95.el7cp |
| Red Hat ceph storage 4 | rbd-nbd-debuginfo | 2:14.2.11-95.el8cp |