PT-2015-6400 · Ceph · Ceph-Deploy

Andreas Stieger · Publicado 2015-06-08 · Atualizado 2024-06-15 · CVE-2015-4053

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ceph-deploy versions prior to 1.5.25

Description The issue concerns the admin command in ceph-deploy, which uses world-readable permissions for the /etc/ceph/ceph.client.admin.keyring file. This allows local users to obtain sensitive information by reading the file.

Recommendations For versions prior to 1.5.25, update to version 1.5.25 or later to resolve the issue. As a temporary workaround, consider changing the permissions of the /etc/ceph/ceph.client.admin.keyring file to restrict access until a patch is applied.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-4053

GHSA-79JF-CCM8-43W7

OPENSUSE-SU-2024:10213-1

PYSEC-2015-3

RHSA-2015:1092

Produtos afetados

Ceph-Deploy

Referências · 19

• https://github.com/ceph/ceph-deploy/commit/9f9fd6e3372043bd2fd67582324c8fb5d7aa361e · Nota
• https://github.com/ceph/ceph-deploy · Nota
• https://github.com/ceph/ceph-deploy/pull/300 · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/ceph-deploy/PYSEC-2015-3.yaml · Nota
• http://tracker.ceph.com/issues/11694 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2015/05/21/13 · Nota
• http://rhn.redhat.com/errata/RHSA-2015-1092.html · Aviso do Fabricante
• https://web.archive.org/web/20200228093353/http://securityfocus.com/bid/74775 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-4053 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2015-4053 · Nota de Segurança
• https://osv.dev/vulnerability/PYSEC-2015-3 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-4053 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-4053 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10213-1 · Aviso do Fabricante
• http://securityfocus.com/bid/74775 · Nota