Redhat: >> Ceph >> 14.2.21 Security Vulnerabilities
Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.
CVSS Score
7.5
EPSS Score
0.002
Published
2025-11-12
A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by searching the mgr logs for grafana and dashboard, with passwords visible.
CVSS Score
4.4
EPSS Score
0.0
Published
2021-01-08