Advisories · Technology
Red Hat Ceph Storage 5.
Every CVE that names Red Hat Ceph Storage 5 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure
- Red Hat Ceph Storage 5
- Red Hat Ceph Storage 9
- Weak cryptography or TLS
- CVSS 8.1 High
Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller
- Red Hat Ceph Storage 5
- Red Hat Ceph Storage 9
- Insecure deserialization
- CVSS 5.5 Medium
Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings
- Red Hat Ceph Storage 5
- Red Hat Ceph Storage 9
- CWE-214
- CVSS 8.1 HighCritical · CVSS 7+ and EPSS
Openssh: regresshion - race condition in ssh allows rce/dos
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
- CWE-364