CVE-2018-10861CWE-285

CVE-2018-10861: vulnerability in Red Hat, Inc. ceph

Published · Updated

Follow this CVE+ Monitor ceph+ Monitor ceph

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.2%
A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.
Affected products
Red Hat, Inc. · ceph
Related CVEs — Red Hat, Inc. ceph

In the same product, most dangerous first.

CVE-2018-1129—CVE-2018-1129EPSS 1.9%CVE-2018-1128—CVE-2018-1128EPSS 1.4%