A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1892108 | Issue Tracking Patch Vendor Advisory |
Configurations
History
No history.
Information
Published : 2020-12-08 01:15
Updated : 2024-02-28 18:08
NVD link : CVE-2020-25677
Mitre link : CVE-2020-25677
CVE.ORG link : CVE-2020-25677
JSON object : View
Products Affected
ceph
- ceph-ansible
redhat
- ceph_storage
CWE
CWE-312
Cleartext Storage of Sensitive Information