Red Hat Ceph Storage Luki w zabezpieczeniach

Oś czasu

Wersja

14.2.04
14.2.14
14.2.24
14.2.34
14.2.44

Przeciwdziałanie

Official Fix6
Temporary Fix0
Workaround0
Unavailable0
Not Defined2

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined8

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent4
Network4

Uwierzytelnianie

Not Defined0
High0
Low8
None0

Interakcja z użytkownikiem

Not Defined0
Required2
None6

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤44
≤50
≤64
≤70
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤50
≤64
≤70
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤44
≤52
≤62
≤70
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k6
<10k0
<25k2
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k6
<2k0
<5k0
<10k2
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Versions (24): 2, 3, 3.0, 4, 4.0, 14.2, 14.2.1, 14.2.2, 14.2.3, 14.2.4, 14.2.5, 14.2.6, 14.2.7, 14.2.8, 14.2.9, 14.2.11, 14.2.12, 14.2.13, 14.2.14, 14.2.15, 14.2.16, 14.2.17, 14.2.18, 14.2.19

Link to Product Website: https://www.redhat.com/

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2022-08-264.54.5Red Hat Ceph Storage weak encryption$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-3979
2021-05-273.53.4Red Hat Ceph Storage Dashboard cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-3509
2021-05-193.53.4Red Hat Ceph Storage RGW GET Request denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-3531
2021-05-185.55.3Red Hat Ceph Storage RadosGW CORS ExposeHeader Tag privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-3524
2020-06-265.95.9Red Hat Ceph Storage RadosGW CORS ExposeHeader Tag Header Injection privilege escalation$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2020-10753
2020-04-136.56.5Red Hat Ceph Storage/Openshift Container Storage Secure Mode Reuse weak encryption$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2020-1759
2019-12-235.45.4Red Hat Ceph Storage RADOS Gateway Daemon privilege escalation$0-$5k$5k-$25kNot DefinedNot Defined0.00CVE-2019-19337
2018-10-099.08.9Red Hat Ceph Storage ceph-isci-cli rbd-target-api privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-14649

więcej wpisów autorstwa Red Hat

◂ PoprzedniPrzeglądKolejny ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!