Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2018-10861

Date: July 10, 2018

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.

Language: C++

Severity Score

Related Resources (14)

https://bugzilla.redhat.com/show_bug.cgi?id=1593308
https://www.debian.org/security/2018/dsa-4339
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00100.html
http://www.securityfocus.com/bid/104742
https://people.canonical.com/~ubuntu-security/cve/CVE-2018-10861
https://nvd.nist.gov/vuln/detail/CVE-2018-10861
https://github.com/ceph/ceph/commit/975528f632f73fbffa3f1fee304e3bbe3296cffc
http://tracker.ceph.com/issues/24838
https://access.redhat.com/errata/RHSA-2018:2261
https://security-tracker.debian.org/tracker/CVE-2018-10861
https://access.redhat.com/errata/RHSA-2018:2179
https://access.redhat.com/errata/RHSA-2018:2177
https://access.redhat.com/errata/RHSA-2018:2274
https://www.mend.io/vulnerability-database/CVE-2018-10861

Severity Score

Weakness Type (CWE)

Improper Authentication

CWE-287

Improper Authorization

CWE-285

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): SINGLE
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us