USN-7182-1: Ceph vulnerability
It was discovered that Ceph incorrectly handled unsupported JWT algorithms in the RadosGW gateway. An attacker could possibly use this issue to bypass certain authentication checks and restrictions.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability in USN-7182-1?
USN-7182-1 discusses a vulnerability in Ceph that allows attackers to potentially bypass authentication checks due to incorrect handling of unsupported JWT algorithms.
Which versions of Ceph are affected by USN-7182-1?
USN-7182-1 affects Ceph versions prior to 19.2.0-0ubuntu2.1, among others in earlier releases.
How do I fix the vulnerability identified in USN-7182-1?
To resolve the issue in USN-7182-1, upgrade to Ceph version 19.2.0-0ubuntu2.1 or later.
What are the potential impacts of the USN-7182-1 vulnerability?
The USN-7182-1 vulnerability could lead to unauthorized access or actions within the Ceph RadosGW gateway.
Is there a workaround for the vulnerability in USN-7182-1?
There is no documented workaround for the USN-7182-1 vulnerability, and upgrading the software is recommended.