PT-2024-41772 · Ceph · Ceph

Published 2024-01-01 · Updated 2026-02-24 · CVE-2024-31884

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:N/AC:H/Au:N/C:C/I:N/A:P

Name of the Vulnerable Software and Affected Versions Ceph (affected versions not specified)

Description An issue exists in Ceph related to incorrect certificate checking when using Pybind. This flaw could allow an attacker to perform a Man In the Middle (MITM) attack, potentially compromising mail server credentials or the contents of mail.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2026-06679

CVE-2024-31884

ECHO-D3E9-A9B9-FF54

MGASA-2026-0025

RHSA-2026:1536

RHSA-2026:2711

RHSA-2026:2769

USN-8045-1

Affected Products

Ceph

References · 20

• https://osv.dev/vulnerability/UBUNTU-CVE-2024-31884 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2026-0025 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2026-0025.html · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-31884 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-06679 · Security Note
• https://ubuntu.com/security/CVE-2024-47866 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8045-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8045-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-31884 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-31884 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-31884 · Security Note
• https://github.com/ceph/ceph/commit/5081933c9a0068fe9deba4fca2d943bda3168518 · Note
• https://github.com/ceph/ceph/security/advisories/GHSA-xj9f-7g59-m4jx · Note