tocsin

Alpine/ceph: high 7.2

An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitize other_keys, allowing key reuse. An attacker who c

Action: Upgrade ceph to 16.2.3-r0 or later.

Affected

introducedfixedlast affected
016.2.3-r0-

Fixed versions

16.2.3-r0

Sources

published · modified · JSON