CVE-2020-25677CWE-312

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions

published December 8, 2020

CVSS
—
EPSS
0%
Percentile
11.0
In the wild
Unconfirmed
What it is

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00213 · 11.0th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2020-12-08T00:02Z
EPSS history
Timeline
  • 08 DEC 00:02Z
    A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions
    cvelistv5