Ceph Project: Security Vulnerabilities
The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.
CVSS Score
7.5
EPSS Score
0.005
Published
2016-10-03