VDB
BDU:2025-00001
BDU:2025-00001
PUBLISHED
CVSS 8.100000381469727 HIGH
Уязвимость демона radosgw системы хранения данных Ceph, позволяющая нарушителю обойти процедуру аутентификации
Risk Scores
CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ceph | ceph | <= 19.2.3 |
| Сообщество свободного программного обеспечения, ООО «Ред Софт» | Debian GNU/Linux, РЕД ОС (запись в едином реестре российских программ №3751), Ceph |
Timeline
- Jan 2, 2025 CVE Published
- Jul 30, 2025 PoC Published
- Sep 12, 2025 CVE Updated
References
- https://github.com/ceph/ceph/pull/60624 url
- https://github.com/ceph/ceph/commit/7566664f89be062e0c9f3519dc60b94c8af5e2a4 url
- https://github.com/ceph/ceph/commit/f6cc16ae17742aa5f9e3be3d8308b62fc8f0e165 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2329846 url
- https://github.com/ceph/ceph/commit/c2c9a67bed02c8cec90e4198dbbe095159781660 advisory
- https://github.com/ceph/ceph/pull/60624/commits/919da3696668a07c6810dfa39301950c81c2eba4 advisory
- https://github.com/ceph/ceph/security/advisories/GHSA-5g9m-mmp6-93mq url
- https://tracker.ceph.com/issues/68836 url
- https://security-tracker.debian.org/tracker/CVE-2024-48916 url
- https://docs.ceph.com/en/reef/radosgw/ url
- http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ advisory