PT-2020-14901 · Red Hat+2 · Ceph+2

Published 2020-01-31 · Updated 2026-03-20 · CVE-2020-1699

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ceph versions 14.2.5 through 14.2.6 Ceph version 15.0.0

Description A path traversal flaw was found in the Ceph dashboard, allowing an unauthenticated attacker to cause information disclosure on the host machine running the Ceph dashboard.

Recommendations For Ceph versions 14.2.5 through 14.2.6, update to version 14.2.7 to resolve the issue. For Ceph version 15.0.0, update to version 15.1.0 to resolve the issue.

Fix

Information Disclosure

Path traversal

Weakness Enumeration

CWE-200

CWE-22

Related Identifiers

ALT-PU-2020-1266

ALT-PU-2020-1349

BIT-CEPH-2020-1699

CVE-2020-1699

OPENSUSE-SU-2020:0187-1

OPENSUSE-SU-2020_0187-1

SUSE-SU-2020:0296-1

SUSE-SU-2020_0296-1

Affected Products

Alt Linux

Ceph

Suse

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2020-1699 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1699 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-1699 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0187-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1699 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-1699 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-ceph-2020-1699 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:0296-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2020-1700 · Note
• https://suse.com/security/cve/CVE-2020-1699 · Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/GFNDLPWVL33C6GRY4RNPOQ77ME6FHZA4 · Note
• https://bugzilla.suse.com/1161312 · Note
• https://suse.com/support/update/announcement/2020/suse-su-20200296-1 · Note
• https://t.me/cvenotify/2974 · Telegram Post
• https://bugzilla.suse.com/1161074 · Note