Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-25677

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.

Published

2020-12-08T01:15:12.070

Last Modified

2024-11-21T05:18:26.463

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

3.9

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-312
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ceph ceph-ansible 4.0.41 Yes
Application redhat ceph_storage 3.0 Yes
Application redhat ceph_storage 4.0 Yes
References