Vulnerability Details CVE-2020-10736
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.5%
CVSS Severity
CVSS v3 Score 8.0
CVSS v2 Score 5.2
References
Products affected by CVE-2020-10736
-
cpe:2.3:a:linuxfoundation:ceph:15.2.0
-
cpe:2.3:a:linuxfoundation:ceph:15.2.1