tocsin

Alpine/ceph: high 7.2

An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitize other_keys, allowing key reuse. An attacker who c

Action: Upgrade ceph to 14.2.20-r0 or later.

Affected

introducedfixedlast affected
014.2.20-r0-

Fixed versions

14.2.20-r0

Sources

published · modified · JSON