REDHAT-BUG-2393864: High severity ceph Ceph vulnerability
Published Sep 8, 2025
·Updated
A vulnerability was discovered within Ceph. An attacker can exploit our prior use of hardcoded IVECs, in a misuse of AES, similar to PERILS in Kerberos4, resulting in authentication bypass.
Affected Software
1 affected component
ceph Ceph
Event History
Sep 8, 2025
Data Sourced
via Red Hat·02:34 PM
DescriptionSeverityAffected Software