Skip to content
OpenAdvisories

Package · PyPI

ceph-deploy

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.0
    CVE-2015-3010

    ceph-deploy allows local users to obtain sensitive information by reading the file

    ceph-deploy before 1.5.23 uses weak permissions (644) for ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.

    ceph-deploy PyPI
  • Low —
    CVE-2015-4053

    ceph-deploy uses world-readable permissions on client.admin key

    The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.

    ceph-deploy PyPI