BIT-ceph-2020-1699

BIT-ceph-2020-1699 PUBLISHED CVSS 7.5 HIGH

A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions 14.2.7 and 15.1.0. An unauthenticated attacker could use this flaw to cause information disclosure on the host machine running the Ceph dashboard.

Risk Scores

CVSS v3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

Vendor	Product	Versions
Bitnami	ceph	14.2.5, 14.2.6, 15.0.0

Timeline

Mar 20, 2026 CVE Published
Mar 20, 2026 CVE Updated

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1699 url
https://nvd.nist.gov/vuln/detail/CVE-2020-1699 url

Open in Interactive Console →