CVE-2016-9579
01.08.2018, 16:29
A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected.Enginsight
| Vendor | Product | Version |
|---|---|---|
| redhat | ceph_storage | 1.3 |
| redhat | ceph_storage_mon | 1.3 |
| redhat | ceph_storage_osd | 1.3 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_workstation | 7.0 |
| redhat | ceph_storage | 2.0 |
| redhat | ceph_storage | 1.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References