CVE-2018-10861CWE-285

A flaw was found in the way ceph mon handles user requests

published July 10, 2018

CVSS
—
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03181 · 88.0th percentile
Weakness
CWE-285 · Improper Authorization
Published
2018-07-10T14:00Z
EPSS history
Timeline
  • 10 JUL 14:00Z
    A flaw was found in the way ceph mon handles user requests
    cvelistv5