CVE-2018-10861 in ceph mon

Resumen

por MITRE

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservar: 2018-05-09
• Divulgación: 2018-07-10
• Moderación: aceptado
• Artículo: VDB-121129
• CPE: listo
• CWE: CWE-287 (confirmado)
• CVSS: 8.1 (NVD)
• EPSS: 0.03249
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-10861
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-10861
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-10861/