NetSight
IP …
high8.1

CVE-2018-10861

A flaw was found in the way ceph mon handles user requests.

Impact

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.

Affected products

VendorProductAffected versions
CephCeph
Versions 10.2.0, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5
RedhatCeph Storage
Version 3
RedhatCeph Storage Mon
Versions 2, 3
RedhatCeph Storage Osd
Versions 2, 3
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0
OpensuseLeap
Version 15.0
DebianDebian Linux
Version 9.0

Weakness classification

CWE-285CWE-287

References