Published: 17/05/2021 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions prior to 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat ceph storage 4.0
redhat ceph
fedoraproject fedora 32
fedoraproject fedora 33
fedoraproject fedora 34
debian debian linux 9.0

Debian Bug report logs - #988889 ceph: CVE-2021-3524 Package: src:ceph; Maintainer for src:ceph is Ceph Packaging Team <team+ceph@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 20 May 2021 19:09:06 UTC Severity: grave Tags: security, upstream Found in version ceph/14220-2 ...

Synopsis Moderate: Red Hat Ceph Storage 51 Security, Enhancement, and Bug Fix update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic Red Hat Ceph Storage 51 is now availableRed Hat Product Security has rated this update ...

Synopsis Moderate: Red Hat Ceph Storage 43 Security and Bug Fix update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic New packages for Red Hat Ceph Storage 43 are now available on Red Hat Enterprise Linux 85Red Hat Pr ...

No description is available for this CVE ...

A security issue was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made In addition, the pr ...

CWE-74 https://bugzilla.redhat.com/show_bug.cgi?id=1951674 https://lists.debian.org/debian-lts-announce/2021/08/msg00013.html https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPCJN2YDZCBMF4FOJXSTAADKFGEQEO7O/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FX5ZHI5L7FOHXOSEV3TYBAL66DMLJ7V5/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZRUNDH2TJRZRWL3DCH2PQ6KROWTPQ7AJ/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988889 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2021-3524

CVE-2021-3524

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect