VULNERABILITY INTELLIGENCE

CVE-2018-10861

CVSS score8.1 HIGH
EPSS probability3.18%
CISA KEVNot currently listed
Published2018-07-10
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Description

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.

Weakness classification

  • CWE-285: Improper Authorization
  • CWE-287: Improper Authentication

Primary references