Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat openshift container storage 4.2 vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv2
CVE-2019-11255
Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (<v0.4.3, <v1.0.2, v1.1, <v1.2.2, <v1.3.1), external-snapshotter (<v0.4.2, <v1.0.2, v1.1, <1.2.2), and external-resizer (v0.1, v0.2) could result in unauthorized Persisten...
Kubernetes External-resizerKubernetes External-snapshotterKubernetes External-provisionerKubernetes External-provisioner 1.3.0Redhat Openshift Container Platform 3.11Redhat Openshift Container Platform 4.1Redhat Openshift Container Platform 4.2
5.8
CVSSv2
CVE-2020-25660
A flaw was found in the Cephx authentication protocol in versions prior to 15.2.6 and prior to 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus. This flaw allows an attacker with access to the Ceph cluster network to au...
Redhat CephRedhat Ceph Storage 2.0Redhat Openshift Container Platform 4.0Redhat Ceph Storage 4.0Fedoraproject Fedora 33
6.8
CVSSv2
CVE-2020-1700
A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can abuse this flaw by making multiple disconnect attempts resulting in a permanent leak of a socket connection by radosgw. This flaw could lead to a denial of servi...
Ceph Ceph -Redhat Openshift Container Storage 4.2Opensuse Leap 15.1Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10
3.6
CVSSv2
CVE-2020-27781
User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation. An Open Stack Manila user can request access to a share to an arbitrary cephx user, including existing users. The access key is retrieved vi...
Redhat CephRedhat Ceph Storage 3.0Redhat Ceph Storage 2.0Redhat Openshift Container Platform 4.0Redhat Ceph Storage 4.0Redhat Openstack Platform 13.0Fedoraproject Fedora 33
4.3
CVSSv2
CVE-2020-1760
A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.
Linuxfoundation CephRedhat Ceph Storage 3.0Redhat Openshift Container Platform 4.2Redhat Ceph Storage 4.0Fedoraproject Fedora 31Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 16.04Debian Debian Linux 9.0
5.8
CVSSv2
CVE-2020-1759
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability exists in the secure mode of the messenger v2 protocol, which can allow an malicious user to forge auth tags and potentially manipulate the data by l...
Redhat Openshift 4.2Redhat Ceph Storage 4.0Redhat Openstack 15Linuxfoundation CephFedoraproject Fedora 31
2.1
CVSSv2
CVE-2020-25677
A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.
Ceph Ceph-ansible 4.0.41Redhat Ceph Storage 3.0Redhat Ceph Storage 4.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook