Debian/ceph: high 7.5
It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packe
Action: Upgrade ceph to 12.2.8+dfsg1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.2.8+dfsg1-1 | - |
Fixed versions
| 12.2.8+dfsg1-1 |
Sources
published · modified · JSON