Vulnerability-Lookup

RHSA-2026:79243

Vulnerability from csaf_redhat - Published: 2026-10-08 13:55 - Updated: 2026-10-09 01:29

Summary

Red Hat Security Advisory: Red Hat Ceph Storage

Severity

Important

Notes

Topic: A new version of Red Hat build of Ceph Storage has been released

Details: The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 8.1. This release updates to the latest version.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2021-43565

There's an input validation flaw in golang.org/x/crypto's readCipherPacket() function. An unauthenticated attacker who sends an empty plaintext packet to a program linked with golang.org/x/crypto/ssh could cause a panic, potentially leading to denial of service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le	—	Vendor Fix fix

Known not affected 24 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64		—
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64		—

Threats

Impact Moderate

CVE-2022-27191

A broken cryptographic algorithm flaw was found in golang.org/x/crypto/ssh. This issue causes a client to fail authentication with RSA keys to servers that reject signature algorithms based on SHA-2, enabling an attacker to crash the server, resulting in a loss of availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Affected products

Fixed 4 products, the same list as for CVE-2021-43565

Known not affected 24 products, the same list as for CVE-2021-43565

Threats

Impact Moderate

CVE-2023-48795

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure in OpenSSH 9.5 against keystroke timing attacks.

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-222 - Truncation of Security-relevant Information

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64	—	Vendor Fix fix Workaround

Known not affected 24 products

Product	Version	Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64	—	Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64	—	Workaround

Threats

Impact Moderate

CVE-2024-48916

A vulnerability in the Ceph Rados Gateway (RadosGW) OIDC provider allows attackers to bypass JWT signature verification by supplying a token with "none" as the algorithm (alg). This occurs because the implementation fails to enforce strict signature validation, enabling attackers to forge valid tokens without a signature.

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-345 - Insufficient Verification of Data Authenticity

Affected products

Fixed 4 products, the same list as for CVE-2023-48795

Known not affected 24 products, the same list as for CVE-2023-48795

Threats

Impact Important

CVE-2025-30156

A flaw was found in the CephX authentication protocol used by Ceph, a distributed storage system. CephX uses AES-128-CBC encryption with a hardcoded initialization vector and no message authentication (HMAC), making it vulnerable to the same class of unauthenticated-encryption attacks that compromised Kerberos 4 as documented in MIT's 2004 PERILS paper. An attacker who has compromised a single low-privilege CephX entity key can use the Ceph monitor as an encryption oracle by requesting tickets for specially-named entity identities over a standard network connection. The monitor encrypts these attacker-controlled names into ciphertext blocks which, due to absent integrity protection, can be spliced into forged credentials for privileged entities such as OSDs, MDSs, and MGRs. This grants cluster-wide access including data reads, data corruption, and full administrative control.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

CWE-1204 - Generation of Weak Initialization Vector (IV)

Affected products

Fixed 4 products, the same list as for CVE-2023-48795

Known not affected 24 products, the same list as for CVE-2023-48795

Threats

Impact Important

CVE-2026-21721

An authorization error has been discovered in Grafana dashboards. The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE-639 - Authorization Bypass Through User-Controlled Key

Affected products

Fixed 4 products, the same list as for CVE-2021-43565

Known not affected 24 products, the same list as for CVE-2021-43565

Threats

Impact Important

CVE-2026-39944

A flaw was found in Ceph RGW's STS (Security Token Service) session token implementation. The STS tokens use the same unauthenticated AES-128-CBC encryption as CephX, which lacks message authentication and uses a hardcoded initialization vector. Because there is no integrity protection on the tokens, an attacker who holds any valid unprivileged STS token can perform a CBC bit-flip attack to modify the token contents and escalate to full RGW admin privileges. This requires only that STS is enabled (rgw_s3_auth_use_sts = true) and that the attacker has a single valid STS token. Successful exploitation grants complete control over the RGW service, including reading, writing, and deleting all objects and buckets.

8.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Affected products

Fixed 4 products, the same list as for CVE-2023-48795

Known not affected 24 products, the same list as for CVE-2023-48795

Threats

Impact Important

CVE-2026-41680

A flaw was found in marked, a markdown parser and compiler. An unauthenticated attacker can exploit this Denial of Service (DoS) vulnerability by providing a specific 3-byte input sequence (a tab, a vertical tab, and a newline). This input triggers an infinite recursion loop during parsing, leading to unbounded memory allocation and causing the host Node.js application to crash due to Memory Exhaustion (OOM).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 4 products, the same list as for CVE-2021-43565

Known not affected 24 products, the same list as for CVE-2021-43565

Threats

Impact Moderate

CVE-2026-50152

A flaw was found in the MON subscription handler of Ceph, a distributed storage system. The handler does not properly authorize access to the config-key store when processing MMonSubscribe messages. Any CephX user holding mon allow r capabilities can read the entire config-key store, which contains sensitive operational secrets including OSD LUKS disk encryption passphrases and, on clusters managed by cephadm, the SSH private key used to administer every host. Exposure of these secrets can lead to full host-level root access and compromise of encrypted data at rest.

8.2 (High)


                
                  CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L

CWE-862 - Missing Authorization

Affected products

Fixed 4 products, the same list as for CVE-2023-48795

Known not affected 24 products, the same list as for CVE-2023-48795

Threats

Impact Important

CVE-2026-54330

A flaw was found in Ceph RGW's SigV4 signature verification handler. When processing S3 requests, RGW verifies only the headers explicitly listed in the X-Amz-SignedHeaders field but does not reject requests that carry additional unsigned x-amz-* headers. This diverges from the AWS S3 specification, which requires all x-amz-* headers to be signed. As a result, anyone holding a presigned PUT URL can attach arbitrary unsigned x-amz-* headers that RGW will honor, effectively escalating their privileges beyond what the original URL signer authorized. This can lead to unauthorized access to and modification of S3 objects.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Fixed 4 products, the same list as for CVE-2023-48795

Known not affected 24 products, the same list as for CVE-2023-48795

Threats

Impact Important

References

62 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:79243	self
https://access.redhat.com/security/cve/CVE-2021-43565	external
https://access.redhat.com/security/cve/CVE-2022-27191	external
https://access.redhat.com/security/cve/CVE-2023-48795	external
https://access.redhat.com/security/cve/CVE-2024-48916	external
https://access.redhat.com/security/cve/CVE-2025-30156	external
https://access.redhat.com/security/cve/CVE-2026-21721	external
https://access.redhat.com/security/cve/CVE-2026-39944	external
https://access.redhat.com/security/cve/CVE-2026-41680	external
https://access.redhat.com/security/cve/CVE-2026-50152	external
https://access.redhat.com/security/cve/CVE-2026-54330	external
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2021-43565	self
https://bugzilla.redhat.com/show_bug.cgi?id=2030787	external
https://www.cve.org/CVERecord?id=CVE-2021-43565	external
https://nvd.nist.gov/vuln/detail/CVE-2021-43565	external
https://access.redhat.com/security/cve/CVE-2022-27191	self
https://bugzilla.redhat.com/show_bug.cgi?id=2064702	external
https://www.cve.org/CVERecord?id=CVE-2022-27191	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27191	external
https://groups.google.com/g/golang-announce/c/-cp…	external
https://access.redhat.com/security/cve/CVE-2023-48795	self
https://bugzilla.redhat.com/show_bug.cgi?id=2254210	external
https://www.cve.org/CVERecord?id=CVE-2023-48795	external
https://nvd.nist.gov/vuln/detail/CVE-2023-48795	external
https://access.redhat.com/solutions/7071748	external
https://terrapin-attack.com/	external
https://access.redhat.com/security/cve/CVE-2024-48916	self
https://bugzilla.redhat.com/show_bug.cgi?id=2329846	external
https://www.cve.org/CVERecord?id=CVE-2024-48916	external
https://nvd.nist.gov/vuln/detail/CVE-2024-48916	external
https://github.com/ceph/ceph/pull/60624/commits/9…	external
https://github.com/ceph/ceph/security/advisories/…	external
https://tracker.ceph.com/issues/68836	external
https://access.redhat.com/security/cve/CVE-2025-30156	self
https://bugzilla.redhat.com/show_bug.cgi?id=2393864	external
https://www.cve.org/CVERecord?id=CVE-2025-30156	external
https://nvd.nist.gov/vuln/detail/CVE-2025-30156	external
https://access.redhat.com/security/cve/CVE-2026-21721	self
https://bugzilla.redhat.com/show_bug.cgi?id=2433242	external
https://www.cve.org/CVERecord?id=CVE-2026-21721	external
https://nvd.nist.gov/vuln/detail/CVE-2026-21721	external
https://grafana.com/security/security-advisories/…	external
https://access.redhat.com/security/cve/CVE-2026-39944	self
https://bugzilla.redhat.com/show_bug.cgi?id=2519431	external
https://www.cve.org/CVERecord?id=CVE-2026-39944	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39944	external
https://access.redhat.com/security/cve/CVE-2026-41680	self
https://bugzilla.redhat.com/show_bug.cgi?id=2461603	external
https://www.cve.org/CVERecord?id=CVE-2026-41680	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41680	external
https://github.com/markedjs/marked/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-50152	self
https://bugzilla.redhat.com/show_bug.cgi?id=2519423	external
https://www.cve.org/CVERecord?id=CVE-2026-50152	external
https://nvd.nist.gov/vuln/detail/CVE-2026-50152	external
https://access.redhat.com/security/cve/CVE-2026-54330	self
https://bugzilla.redhat.com/show_bug.cgi?id=2519428	external
https://www.cve.org/CVERecord?id=CVE-2026-54330	external
https://nvd.nist.gov/vuln/detail/CVE-2026-54330	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A new version of Red Hat build of Ceph Storage has been released",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 8.1.\nThis release updates to the latest version.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:79243",
        "url": "https://access.redhat.com/errata/RHSA-2026:79243"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2021-43565",
        "url": "https://access.redhat.com/security/cve/CVE-2021-43565"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2022-27191",
        "url": "https://access.redhat.com/security/cve/CVE-2022-27191"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2023-48795",
        "url": "https://access.redhat.com/security/cve/CVE-2023-48795"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2024-48916",
        "url": "https://access.redhat.com/security/cve/CVE-2024-48916"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-30156",
        "url": "https://access.redhat.com/security/cve/CVE-2025-30156"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-21721",
        "url": "https://access.redhat.com/security/cve/CVE-2026-21721"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39944",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39944"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41680",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41680"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-50152",
        "url": "https://access.redhat.com/security/cve/CVE-2026-50152"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-54330",
        "url": "https://access.redhat.com/security/cve/CVE-2026-54330"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_ceph_storage/",
        "url": "https://docs.redhat.com/en/documentation/red_hat_ceph_storage/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79243.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Ceph Storage",
    "tracking": {
      "current_release_date": "2026-10-09T01:29:47+00:00",
      "generator": {
        "date": "2026-10-09T01:29:47+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:79243",
      "initial_release_date": "2026-10-08T13:55:19+00:00",
      "revision_history": [
        {
          "date": "2026-10-08T13:55:19+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-08T13:55:21+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-09T01:29:47+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Ceph Storage 8.1",
                "product": {
                  "name": "Red Hat Ceph Storage 8.1",
                  "product_id": "Red Hat Ceph Storage 8.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ceph_storage:8.1::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Ceph Storage"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel9@sha256%3A606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel9\u0026tag=1791176238"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3A95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1791176338"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel9@sha256%3A17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel9\u0026tag=1791175257"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
                  "product_id": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/oauth2-proxy-rhel9\u0026tag=1791176282"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-promtail-rhel9@sha256%3Ac7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/rhceph-promtail-rhel9\u0026tag=1791176366"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-8-rhel9@sha256%3Afa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/rhceph-8-rhel9\u0026tag=1791176990"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel9@sha256%3Ae4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel9\u0026tag=1791176336"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel9@sha256%3A80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel9\u0026tag=1791176238"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3A05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1791176338"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel9@sha256%3A4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel9\u0026tag=1791175257"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
                  "product_id": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/oauth2-proxy-rhel9\u0026tag=1791176282"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-promtail-rhel9@sha256%3A32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/rhceph-promtail-rhel9\u0026tag=1791176366"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-8-rhel9@sha256%3A7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/rhceph-8-rhel9\u0026tag=1791176990"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel9@sha256%3Ad804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel9\u0026tag=1791176336"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel9@sha256%3Ac19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel9\u0026tag=1791176238"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3A52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1791176338"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel9@sha256%3A2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel9\u0026tag=1791175257"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/oauth2-proxy-rhel9\u0026tag=1791176282"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-promtail-rhel9@sha256%3A7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/rhceph-promtail-rhel9\u0026tag=1791176366"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-8-rhel9@sha256%3A5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/rhceph-8-rhel9\u0026tag=1791176990"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel9@sha256%3A8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel9\u0026tag=1791176336"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel9@sha256%3A25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel9\u0026tag=1791176238"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3Acc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1791176338"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel9@sha256%3A22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel9\u0026tag=1791175257"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
                  "product_id": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3Ad20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/oauth2-proxy-rhel9\u0026tag=1791176282"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
                  "product_id": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-promtail-rhel9@sha256%3A10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/rhceph-promtail-rhel9\u0026tag=1791176366"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
                  "product_id": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-8-rhel9@sha256%3A2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/rhceph-8-rhel9\u0026tag=1791176990"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel9@sha256%3A47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel9\u0026tag=1791176336"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-43565",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2021-12-07T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2030787"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "There\u0027s an input validation flaw in golang.org/x/crypto\u0027s readCipherPacket() function. An unauthenticated attacker who sends an empty plaintext packet to a program linked with golang.org/x/crypto/ssh could cause a panic, potentially leading to denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto: empty plaintext packet causes panic",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "go-toolset shipped with Red Hat Developer Tools - Compilers and golang shipped with Red Hat Enterprise Linux 8 are not affected by this flaw because they do not ship the vulnerable code.\n\nThis flaw was rated to have a Moderate impact because it is not shipped in the Golang standard library and thus has a reduced impact to products compared with other flaws of this type.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-43565"
        },
        {
          "category": "external",
          "summary": "RHBZ#2030787",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2030787"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-43565",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-43565"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-43565",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-43565"
        }
      ],
      "release_date": "2021-12-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-08T13:55:19+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:79243"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/crypto: empty plaintext packet causes panic"
    },
    {
      "cve": "CVE-2022-27191",
      "cwe": {
        "id": "CWE-327",
        "name": "Use of a Broken or Risky Cryptographic Algorithm"
      },
      "discovery_date": "2022-03-16T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2064702"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A broken cryptographic algorithm flaw was found in golang.org/x/crypto/ssh. This issue causes a client to fail authentication with RSA keys to servers that reject signature algorithms based on SHA-2, enabling an attacker to crash the server, resulting in a loss of availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: crash in a golang.org/x/crypto/ssh server",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In OpenShift Container Platform (OCP) the vulnerable golang.org/x/crypto/ssh package is bundled in many components. The affected code is in the SSH server portion that is not used, hence the impact by this vulnerability is reduced. Additionally the OCP installer components, that also bundle vulnerable golang.org/x/crypto/ssh package, are used only during the cluster installation process, hence for already deployed and running OCP clusters the installer components are considered as affected by this vulnerability but not impacted.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-27191"
        },
        {
          "category": "external",
          "summary": "RHBZ#2064702",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2064702"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-27191",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-27191"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-27191",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27191"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/-cp44ypCT5s/m/wmegxkLiAQAJ",
          "url": "https://groups.google.com/g/golang-announce/c/-cp44ypCT5s/m/wmegxkLiAQAJ"
        }
      ],
      "release_date": "2022-03-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-08T13:55:19+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:79243"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: crash in a golang.org/x/crypto/ssh server"
    },
    {
      "cve": "CVE-2023-48795",
      "cwe": {
        "id": "CWE-222",
        "name": "Truncation of Security-relevant Information"
      },
      "discovery_date": "2023-12-12T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2254210"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure in OpenSSH 9.5 against keystroke timing attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ssh: Prefix truncation attack on Binary Packet Protocol (BPP)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This CVE is classified as moderate because the attack requires an active Man-in-the-Middle (MITM) who can intercept and modify the connection\u0027s traffic at the TCP/IP layer.\n\nAlthough the attack is cryptographically innovative, its security impact is fortunately quite limited. It only allows the deletion of consecutive messages, and deleting most messages at this protocol stage prevents user authentication from proceeding, leading to a stalled connection.\n\nThe most significant identified impact is that it enables a MITM to delete the SSH2_MSG_EXT_INFO message sent before authentication begins. This allows the attacker to disable a subset of keystroke timing obfuscation features. However, there is no other observable impact on session secrecy or session integrity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-48795"
        },
        {
          "category": "external",
          "summary": "RHBZ#2254210",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254210"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-48795",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-48795"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-48795",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-48795"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/solutions/7071748",
          "url": "https://access.redhat.com/solutions/7071748"
        },
        {
          "category": "external",
          "summary": "https://terrapin-attack.com/",
          "url": "https://terrapin-attack.com/"
        }
      ],
      "release_date": "2023-12-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-08T13:55:19+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:79243"
        },
        {
          "category": "workaround",
          "details": "Update to the last version and check that client and server provide kex pseudo-algorithms indicating usage of the updated version of the protocol which is protected from the attack. If \"kex-strict-c-v00@openssh.com\" is provided by clients and \"kex-strict-s-v00@openssh.com\" is in the server\u0027s reply, no other steps are necessary.\n\nDisabling ciphers if necessary:\n\nIf \"kex-strict-c-v00@openssh.com\" is not provided by clients or \"kex-strict-s-v00@openssh.com\" is absent in the server\u0027s reply, you can disable the following ciphers and HMACs as a workaround on RHEL-8 and RHEL-9:\n\n1. chacha20-poly1305@openssh.com\n2. hmac-sha2-512-etm@openssh.com\n3. hmac-sha2-256-etm@openssh.com\n4. hmac-sha1-etm@openssh.com\n5. hmac-md5-etm@openssh.com\n\nTo do that through crypto-policies, one can apply a subpolicy with the following content:\n```\ncipher@SSH = -CHACHA20-POLY1305\nssh_etm = 0\n```\ne.g., by putting these lines into `/etc/crypto-policies/policies/modules/CVE-2023-48795.pmod`, applying the resulting subpolicy with `update-crypto-policies --set $(update-crypto-policies --show):CVE-2023-48795` and restarting openssh server.\n\nOne can verify that the changes are in effect by ensuring the ciphers listed above are missing from both `/etc/crypto-policies/back-ends/openssh.config` and `/etc/crypto-policies/back-ends/opensshserver.config`.\n\nFor more details on using crypto-policies, please refer to https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/security_hardening/using-the-system-wide-cryptographic-policies_security-hardening\n\nNote that this procedure does limit the interoperability of the host and is only suggested as a temporary mitigation until the issue is fully resolved with an update.\n\nFor RHEL-7: \nWe can recommend to use strict MACs and Ciphers on RHEL7 in both files /etc/ssh/ssh_config and /etc/ssh/sshd_config.\n\nBelow strict set of Ciphers and MACs can be used as mitigation for RHEL 7.\n\n```\nCiphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com\nMACs umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512\n```\n\n- For Openshift Container Platform 4:\nPlease refer the KCS[1] document for verifying the fix in RHCOS.\n\n[1] https://access.redhat.com/solutions/7071748\n\n~~~\nNOTE: The crypto-policies workaround requires RHEL 8.5 or newer. \nCustomers (for older RHEL 8 releases) who cannot immediately update crypto-policies packages may manually configuring Ciphers and MACs directly in /etc/ssh/sshd_config and ssh_config (as used for \"RHEL-7\") method documented https://access.redhat.com/solutions/7066001\n~~~~",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "ssh: Prefix truncation attack on Binary Packet Protocol (BPP)"
    },
    {
      "cve": "CVE-2024-48916",
      "cwe": {
        "id": "CWE-345",
        "name": "Insufficient Verification of Data Authenticity"
      },
      "discovery_date": "2024-12-02T09:49:22.001000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2329846"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in the Ceph Rados Gateway (RadosGW) OIDC provider allows attackers to bypass JWT signature verification by supplying a token with \"none\" as the algorithm (alg). This occurs because the implementation fails to enforce strict signature validation, enabling attackers to forge valid tokens without a signature.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ceph: rhceph-container: Authentication bypass in CEPH RadosGW",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Important due to its ability to bypass JWT signature verification in Ceph Rados Gateway, allowing attackers to forge tokens and gain unauthorized access.\n\nOpenShift Data Foundation (ODF) is affected but not vulnerable to this issue. To exploit this issue, an attacker needs to use OIDC and manually set the algorithm to \"none\", then RadosGW will not validate the signature on a JWT. ODF is protected because it uses the Vault API to interface with OIDC (and other providers) and it does not support \"none\" as an algorithm type.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-48916"
        },
        {
          "category": "external",
          "summary": "RHBZ#2329846",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2329846"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-48916",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-48916"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-48916",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48916"
        },
        {
          "category": "external",
          "summary": "https://github.com/ceph/ceph/pull/60624/commits/919da3696668a07c6810dfa39301950c81c2eba4",
          "url": "https://github.com/ceph/ceph/pull/60624/commits/919da3696668a07c6810dfa39301950c81c2eba4"
        },
        {
          "category": "external",
          "summary": "https://github.com/ceph/ceph/security/advisories/GHSA-5g9m-mmp6-93mq",
          "url": "https://github.com/ceph/ceph/security/advisories/GHSA-5g9m-mmp6-93mq"
        },
        {
          "category": "external",
          "summary": "https://tracker.ceph.com/issues/68836",
          "url": "https://tracker.ceph.com/issues/68836"
        }
      ],
      "release_date": "2024-12-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-08T13:55:19+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:79243"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "ceph: rhceph-container: Authentication bypass in CEPH RadosGW"
    },
    {
      "cve": "CVE-2025-30156",
      "cwe": {
        "id": "CWE-1204",
        "name": "Generation of Weak Initialization Vector (IV)"
      },
      "discovery_date": "2025-05-08T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2393864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the CephX authentication protocol used by Ceph, a distributed storage system. CephX uses AES-128-CBC encryption with a hardcoded initialization vector and no message authentication (HMAC), making it vulnerable to the same class of unauthenticated-encryption attacks that compromised Kerberos 4 as documented in MIT\u0027s 2004 PERILS paper. An attacker who has compromised a single low-privilege CephX entity key can use the Ceph monitor as an encryption oracle by requesting tickets for specially-named entity identities over a standard network connection. The monitor encrypts these attacker-controlled names into ciphertext blocks which, due to absent integrity protection, can be spliced into forged credentials for privileged entities such as OSDs, MDSs, and MGRs. This grants cluster-wide access including data reads, data corruption, and full administrative control.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: ceph: kernel: Ceph: exploit of hardcoded IVECs, in a misuse of AES, resulting in authentication bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Important, given that exploitation requires a compromised low-privilege CephX entity key and network access to a Ceph monitor. Successful exploitation allows an attacker to forge credentials for any privileged Ceph entity, gaining full cluster-wide access including data reads, data corruption, and administrative control over OSDs, MDSs, and MGRs. The vulnerability\u0027s root cause is the use of unauthenticated AES-128-CBC encryption with a hardcoded initialization vector in the CephX protocol, a cryptographic design weakness identical to the one that rendered Kerberos 4 insecure.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-30156"
        },
        {
          "category": "external",
          "summary": "RHBZ#2393864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2393864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-30156",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-30156"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-30156",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30156"
        }
      ],
      "release_date": "2026-07-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-08T13:55:19+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:79243"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, Red Hat recommends isolating the Ceph messenger protocol to dedicated internal networks with strict access controls, limiting exposure to potential attackers. Administrators should audit and minimize the number of CephX client credentials in circulation and enforce strong credential management to reduce the risk of low-privilege key compromise. Where possible, deploy msgr2 with on-wire encryption to reduce passive sniffing exposure. It is strongly advised to apply vendor-supplied patches as soon as they are released, upgrade to fixed Ceph versions (Tentacle 20.2.4 or later), and rotate all CephX keys to the new AES-256-CTS-HMAC-SHA384-192 cipher type, prioritizing server-side keys.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: ceph: kernel: Ceph: exploit of hardcoded IVECs, in a misuse of AES, resulting in authentication bypass"
    },
    {
      "cve": "CVE-2026-21721",
      "cwe": {
        "id": "CWE-639",
        "name": "Authorization Bypass Through User-Controlled Key"
      },
      "discovery_date": "2026-01-27T10:02:34.317952+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2433242"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An authorization error has been discovered in Grafana dashboards. The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization\u2011internal privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "grafana/grafana/pkg/services/dashboards: Grafana Dashboard Permissions Scope Bypass Enables Cross\u2011Dashboard Privilege Escalation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-21721"
        },
        {
          "category": "external",
          "summary": "RHBZ#2433242",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433242"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-21721",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-21721"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21721",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21721"
        },
        {
          "category": "external",
          "summary": "https://grafana.com/security/security-advisories/CVE-2026-21721",
          "url": "https://grafana.com/security/security-advisories/CVE-2026-21721"
        }
      ],
      "release_date": "2026-01-27T09:07:55.160000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-08T13:55:19+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:79243"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "grafana/grafana/pkg/services/dashboards: Grafana Dashboard Permissions Scope Bypass Enables Cross\u2011Dashboard Privilege Escalation"
    },
    {
      "cve": "CVE-2026-39944",
      "cwe": {
        "id": "CWE-327",
        "name": "Use of a Broken or Risky Cryptographic Algorithm"
      },
      "discovery_date": "2026-08-18T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2519431"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Ceph RGW\u0027s STS (Security Token Service) session token implementation. The STS tokens use the same unauthenticated AES-128-CBC encryption as CephX, which lacks message authentication and uses a hardcoded initialization vector. Because there is no integrity protection on the tokens, an attacker who holds any valid unprivileged STS token can perform a CBC bit-flip attack to modify the token contents and escalate to full RGW admin privileges. This requires only that STS is enabled (rgw_s3_auth_use_sts = true) and that the attacker has a single valid STS token. Successful exploitation grants complete control over the RGW service, including reading, writing, and deleting all objects and buckets.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ceph: ceph: RGW STS session tokens vulnerable to CBC bit-flip attack enabling admin privilege escalation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Important, given that it can be exploited over the network by any holder of a valid STS token without user interaction. Successful exploitation allows an attacker to escalate from any unprivileged STS session to full RGW admin, gaining complete read, write, and delete access to all S3 objects and buckets. The vulnerability\u0027s root cause is the use of unauthenticated AES-128-CBC encryption in STS session tokens, sharing the same cryptographic weakness as CVE-2025-30156.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39944"
        },
        {
          "category": "external",
          "summary": "RHBZ#2519431",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519431"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39944",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39944"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39944",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39944"
        }
      ],
      "release_date": "2026-08-19T17:57:46+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-08T13:55:19+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:79243"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "ceph: ceph: RGW STS session tokens vulnerable to CBC bit-flip attack enabling admin privilege escalation"
    },
    {
      "cve": "CVE-2026-41680",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-04-24T18:01:07.534035+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2461603"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in marked, a markdown parser and compiler. An unauthenticated attacker can exploit this Denial of Service (DoS) vulnerability by providing a specific 3-byte input sequence (a tab, a vertical tab, and a newline). This input triggers an infinite recursion loop during parsing, leading to unbounded memory allocation and causing the host Node.js application to crash due to Memory Exhaustion (OOM).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "marked: Marked: Denial of Service via specific input sequence",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41680"
        },
        {
          "category": "external",
          "summary": "RHBZ#2461603",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461603"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41680",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41680"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41680",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41680"
        },
        {
          "category": "external",
          "summary": "https://github.com/markedjs/marked/security/advisories/GHSA-6v9c-7cg6-27q7",
          "url": "https://github.com/markedjs/marked/security/advisories/GHSA-6v9c-7cg6-27q7"
        }
      ],
      "release_date": "2026-04-24T17:26:27.847000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-08T13:55:19+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:79243"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, Red Hat products that utilize the \u0027marked\u0027 library should be configured to process markdown content only from trusted sources. If markdown rendering is not a critical function, consider disabling or restricting its use within the application\u0027s configuration to reduce exposure.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "marked: Marked: Denial of Service via specific input sequence"
    },
    {
      "cve": "CVE-2026-50152",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "discovery_date": "2026-08-18T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2519423"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the MON subscription handler of Ceph, a distributed storage system. The handler does not properly authorize access to the config-key store when processing MMonSubscribe messages. Any CephX user holding mon allow r capabilities can read the entire config-key store, which contains sensitive operational secrets including OSD LUKS disk encryption passphrases and, on clusters managed by cephadm, the SSH private key used to administer every host. Exposure of these secrets can lead to full host-level root access and compromise of encrypted data at rest.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ceph: ceph: MON subscription handler exposes config-key store to low-privilege CephX users",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Important, given that it can be exploited from the adjacent cluster network with low-privilege CephX credentials and no user interaction. Successful exploitation allows an attacker to read the full MON config-key store, exposing OSD LUKS passphrases and cephadm SSH private keys, potentially yielding root access on all cluster hosts. The vulnerability\u0027s root cause is missing authorization checks in the MON subscription handler when serving config-key store contents.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-50152"
        },
        {
          "category": "external",
          "summary": "RHBZ#2519423",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519423"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-50152",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-50152"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50152",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50152"
        }
      ],
      "release_date": "2026-08-19T17:57:46+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-08T13:55:19+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:79243"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "ceph: ceph: MON subscription handler exposes config-key store to low-privilege CephX users"
    },
    {
      "cve": "CVE-2026-54330",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-08-18T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2519428"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Ceph RGW\u0027s SigV4 signature verification handler. When processing S3 requests, RGW verifies only the headers explicitly listed in the X-Amz-SignedHeaders field but does not reject requests that carry additional unsigned x-amz-* headers. This diverges from the AWS S3 specification, which requires all x-amz-* headers to be signed. As a result, anyone holding a presigned PUT URL can attach arbitrary unsigned x-amz-* headers that RGW will honor, effectively escalating their privileges beyond what the original URL signer authorized. This can lead to unauthorized access to and modification of S3 objects.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ceph: ceph: RGW SigV4 verifier allows attachment of arbitrary unsigned x-amz-* headers leading to privilege escalation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Important, given that exploitation requires only a presigned PUT URL and knowledge of the SigV4 protocol gap. Successful exploitation allows an attacker to escalate privileges beyond the scope intended by the presigned URL signer, gaining unauthorized read and write access to S3 objects. The vulnerability\u0027s root cause is incomplete signature verification in RGW\u0027s SigV4 handler, which fails to reject requests containing unsigned x-amz-* headers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54330"
        },
        {
          "category": "external",
          "summary": "RHBZ#2519428",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519428"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54330",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54330"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54330",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54330"
        }
      ],
      "release_date": "2026-08-19T17:57:46+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-08T13:55:19+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:79243"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:25c748548e1514f7ddde641f081497cd94a71518de62a141cf0c7fef6fa5a00c_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:606c3c9fb7e17de1b3e5981c0e8fe060fd4db6a94c04840008ef79bcf50386b0_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:80a251fa12bc350ca8aab1dd9054f86768119b20fc38b484c17af50805d19b98_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:c19e1ec7ad2e588d51e5934fb97c64965e948479aed4751939e8398cd0f008f1_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:17050d0ebc49274ce706e4639ca6502f3750127893bc534314a86958e581553a_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:22d113b46e255d4683a4ae929ede3e14e1c75495895abeb9636a9f8f6f8cc2eb_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:2a0ef10019c0d9fc2ba03b3ffbffe48d352f62d4124155dae4d166498b3eb1c7_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:4ee6f59422288387c4acff7da0f8cb4c12bfe94690da4986f1358c13b0295008_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:332cf62937c53b1495812dcb3fd8d39df372572c6cf3b6fe7e8ea9aa0a05dd5b_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:54b27c84bb316bae524d131fbf51ca7fc38784e9f3384137b660e961a71dc340_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:71361c1aba8442e9e21af026d3a73c2f5124ef472766545f55f77dfe7d033bbe_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:d20e25c02cad018ced68410396b1385c6ee201fbfe61590f3a80ed0ad9c660b3_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:2b2d9fc84f4cc9827ca03406a1ee778f11c8f996cec379c12465dfae21bf5832_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:5496d6b783ed5b48d6ba889d7e656d8fb9c47fc87149fce88cb1ce5e18970f20_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:7a5133f2adbd7d8d7953484c53eec5914d9fa055c7327b474e843fa2e083a7ed_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:fa0c153625d122b206fab5d14adb467dacf192212e147772ad5d6efee016adac_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:05abd08e664508106bb57a18b75147007276a9368676a919a61080930c478c51_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:52f5863ea71c31cf51b9f75f57ef362b99217d75be9896fcb453a2d1e2755f54_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:95c1012aebbf1d2f11cb64830378a86459e47111dfd3b3d3f0747c463fcec6b3_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:cc52ebdd7b4d1252b71a8fbeb94e2cd6f842054c1edceebfe51efef48a62ea54_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:10f7a403879682ffa0e674ebf5bd537bd36da428d981712ada80f20c71257822_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:32887d89e509c051aafe9918a09b410b50d568396d7bb55978cdab3b78d34156_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:7f2e0116d878ba773de63badc8bc9f178855a095002bed80cc536aff319617a3_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c7b2e91a1aea2c255e8b9315f2f6fecbe7a708d6a2b2ea0b8cef5e20267b5ab2_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:47877aea3d5142a42b01dbe8108ead76b55c92fac60433816dce699bfde9ec27_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:8c4bfcd647337733f6a1c05957d7b8bb8dff61a0ac33d7cc3a4b22717030354f_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:d804229ee55b5eb1a99a95a71bad2de5a1675783da6fd661d85ede1eca1ced70_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:e4bf3c69d6a14eb59d794dcbb94d8cc64940ddb798595c2d1f1d2b86d0cf5240_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "ceph: ceph: RGW SigV4 verifier allows attachment of arbitrary unsigned x-amz-* headers leading to privilege escalation"
    }
  ]
}

CVE-2021-43565 (GCVE-0-2021-43565)

Vulnerability from cvelistv5 – Published: 2022-09-06 17:03 – Updated: 2024-08-04 04:03

Summary

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 27/100 over 2388 records in the last 180 days details

References

2 references

URL	Tags
https://groups.google.com/forum/#%21forum/golang-…	x_refsource_MISC
https://groups.google.com/g/golang-announce/c/2AR…	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T04:03:07.828Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://groups.google.com/forum/#%21forum/golang-announce"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/2AR1sKiM-Qs"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-06T17:03:42.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://groups.google.com/forum/#%21forum/golang-announce"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://groups.google.com/g/golang-announce/c/2AR1sKiM-Qs"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-43565",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://groups.google.com/forum/#!forum/golang-announce",
              "refsource": "MISC",
              "url": "https://groups.google.com/forum/#!forum/golang-announce"
            },
            {
              "name": "https://groups.google.com/g/golang-announce/c/2AR1sKiM-Qs",
              "refsource": "CONFIRM",
              "url": "https://groups.google.com/g/golang-announce/c/2AR1sKiM-Qs"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-43565",
    "datePublished": "2022-09-06T17:03:42.000Z",
    "dateReserved": "2021-11-09T00:00:00.000Z",
    "dateUpdated": "2024-08-04T04:03:07.828Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-27191 (GCVE-0-2022-27191)

Vulnerability from cvelistv5 – Published: 2022-03-18 06:03 – Updated: 2024-08-03 05:25

Summary

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 27/100 over 2388 records in the last 180 days details

References

14 references

URL	Tags
https://groups.google.com/g/golang-announce	x_refsource_MISC
https://groups.google.com/g/golang-announce/c/-cp…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://security.netapp.com/advisory/ntap-2022042…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:25:31.128Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/-cp44ypCT5s"
          },
          {
            "name": "FEDORA-2022-a4c9009f3e",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HHGBEGJ54DZZGTXFUQNS7ZIG3E624YAF/"
          },
          {
            "name": "FEDORA-2022-d37fb34309",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QTFOIDHQRGNI4P6LYN6ILH5G443RYYKB/"
          },
          {
            "name": "FEDORA-2022-3a63897745",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YHYRQB7TRMHDB3NEHW5XBRG7PPMUTPGV/"
          },
          {
            "name": "FEDORA-2022-5cbd6de569",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQNPPQWSTP2IX7SHE6TS4SP4EVMI5EZK/"
          },
          {
            "name": "FEDORA-2022-c87047f163",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J5WPM42UR6XIBQNQPNQHM32X7S4LJTRX/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220429-0002/"
          },
          {
            "name": "FEDORA-2022-14712f9699",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ3S7LB65N54HXXBCB67P4TTOHTNPP5O/"
          },
          {
            "name": "FEDORA-2022-08ae2dd481",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZFUNHFHQVJSADNH7EZ3B53CYDZVEEPBP/"
          },
          {
            "name": "FEDORA-2022-5e637f6cc6",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ/"
          },
          {
            "name": "FEDORA-2022-fae3ecee19",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/"
          },
          {
            "name": "FEDORA-2022-ba365d3703",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/"
          },
          {
            "name": "FEDORA-2022-30c5ed5625",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-17T03:11:23.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://groups.google.com/g/golang-announce"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://groups.google.com/g/golang-announce/c/-cp44ypCT5s"
        },
        {
          "name": "FEDORA-2022-a4c9009f3e",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HHGBEGJ54DZZGTXFUQNS7ZIG3E624YAF/"
        },
        {
          "name": "FEDORA-2022-d37fb34309",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QTFOIDHQRGNI4P6LYN6ILH5G443RYYKB/"
        },
        {
          "name": "FEDORA-2022-3a63897745",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YHYRQB7TRMHDB3NEHW5XBRG7PPMUTPGV/"
        },
        {
          "name": "FEDORA-2022-5cbd6de569",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQNPPQWSTP2IX7SHE6TS4SP4EVMI5EZK/"
        },
        {
          "name": "FEDORA-2022-c87047f163",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J5WPM42UR6XIBQNQPNQHM32X7S4LJTRX/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220429-0002/"
        },
        {
          "name": "FEDORA-2022-14712f9699",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ3S7LB65N54HXXBCB67P4TTOHTNPP5O/"
        },
        {
          "name": "FEDORA-2022-08ae2dd481",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZFUNHFHQVJSADNH7EZ3B53CYDZVEEPBP/"
        },
        {
          "name": "FEDORA-2022-5e637f6cc6",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ/"
        },
        {
          "name": "FEDORA-2022-fae3ecee19",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/"
        },
        {
          "name": "FEDORA-2022-ba365d3703",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/"
        },
        {
          "name": "FEDORA-2022-30c5ed5625",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-27191",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://groups.google.com/g/golang-announce",
              "refsource": "MISC",
              "url": "https://groups.google.com/g/golang-announce"
            },
            {
              "name": "https://groups.google.com/g/golang-announce/c/-cp44ypCT5s",
              "refsource": "CONFIRM",
              "url": "https://groups.google.com/g/golang-announce/c/-cp44ypCT5s"
            },
            {
              "name": "FEDORA-2022-a4c9009f3e",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HHGBEGJ54DZZGTXFUQNS7ZIG3E624YAF/"
            },
            {
              "name": "FEDORA-2022-d37fb34309",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QTFOIDHQRGNI4P6LYN6ILH5G443RYYKB/"
            },
            {
              "name": "FEDORA-2022-3a63897745",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YHYRQB7TRMHDB3NEHW5XBRG7PPMUTPGV/"
            },
            {
              "name": "FEDORA-2022-5cbd6de569",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZQNPPQWSTP2IX7SHE6TS4SP4EVMI5EZK/"
            },
            {
              "name": "FEDORA-2022-c87047f163",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J5WPM42UR6XIBQNQPNQHM32X7S4LJTRX/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220429-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220429-0002/"
            },
            {
              "name": "FEDORA-2022-14712f9699",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZ3S7LB65N54HXXBCB67P4TTOHTNPP5O/"
            },
            {
              "name": "FEDORA-2022-08ae2dd481",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZFUNHFHQVJSADNH7EZ3B53CYDZVEEPBP/"
            },
            {
              "name": "FEDORA-2022-5e637f6cc6",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ/"
            },
            {
              "name": "FEDORA-2022-fae3ecee19",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/"
            },
            {
              "name": "FEDORA-2022-ba365d3703",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/"
            },
            {
              "name": "FEDORA-2022-30c5ed5625",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-27191",
    "datePublished": "2022-03-18T06:03:34.000Z",
    "dateReserved": "2022-03-15T00:00:00.000Z",
    "dateUpdated": "2024-08-03T05:25:31.128Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-48795 (GCVE-0-2023-48795)

Vulnerability from cvelistv5 – Published: 2023-12-18 00:00 – Updated: 2026-07-14 12:16

Summary

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.

Severity

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2023-12-22 05:01 UTC

CWE

n/a
CWE-354 - Improper Validation of Integrity Check Value

Assigner

mitre CNA under the mitre root

CNA scorecard E 27/100 over 2388 records in the last 180 days details

References

139 references

URL	Tags
https://www.chiark.greenend.org.uk/~sgtatham/putt…
https://matt.ucc.asn.au/dropbear/CHANGES
https://github.com/proftpd/proftpd/blob/master/RE…
https://www.netsarang.com/en/xshell-update-history/
https://www.paramiko.org/changelog.html
https://www.openssh.com/openbsd.html
https://github.com/openssh/openssh-portable/commi…
https://groups.google.com/g/golang-announce/c/-n5…
https://www.bitvise.com/ssh-server-version-history
https://github.com/ronf/asyncssh/tags
https://gitlab.com/libssh/libssh-mirror/-/tags
https://www.reddit.com/r/sysadmin/comments/18idv5…
https://github.com/erlang/otp/blob/d1b43dc0f1361d…
https://www.openssh.com/txt/release-9.6
https://jadaptive.com/important-java-ssh-security…
https://www.terrapin-attack.com
https://github.com/mkj/dropbear/blob/17657c36cce6…
https://github.com/ronf/asyncssh/blob/develop/doc…
https://thorntech.com/cve-2023-48795-and-sftp-gateway/
https://github.com/warp-tech/russh/releases/tag/v0.40.2
https://github.com/TeraTermProject/teraterm/commi…
https://www.openwall.com/lists/oss-security/2023/…
https://twitter.com/TrueSkrillor/status/173677438…
https://github.com/golang/crypto/commit/9d2ee975e…
https://github.com/paramiko/paramiko/issues/2337
https://groups.google.com/g/golang-announce/c/qA3…
https://news.ycombinator.com/item?id=38684904
https://news.ycombinator.com/item?id=38685286
http://www.openwall.com/lists/oss-security/2023/12/18/3	mailing-list
https://github.com/mwiede/jsch/issues/457
https://git.libssh.org/projects/libssh.git/commit…
https://github.com/erlang/otp/releases/tag/OTP-26.2.1
https://github.com/advisories/GHSA-45x7-px36-x8w8
https://security-tracker.debian.org/tracker/sourc…
https://security-tracker.debian.org/tracker/sourc…
https://security-tracker.debian.org/tracker/CVE-2…
https://bugzilla.suse.com/show_bug.cgi?id=1217950
https://bugzilla.redhat.com/show_bug.cgi?id=2254210
https://bugs.gentoo.org/920280
https://ubuntu.com/security/CVE-2023-48795
https://www.suse.com/c/suse-addresses-the-ssh-v2-…
https://access.redhat.com/security/cve/cve-2023-48795
https://github.com/mwiede/jsch/pull/461
https://github.com/drakkan/sftpgo/releases/tag/v2.5.6
https://github.com/libssh2/libssh2/pull/1291
https://forum.netgate.com/topic/184941/terrapin-s…
https://github.com/jtesta/ssh-audit/commit/8e972c…
https://github.com/rapier1/hpn-ssh/releases
https://github.com/proftpd/proftpd/issues/456
https://github.com/TeraTermProject/teraterm/relea…
https://github.com/mwiede/jsch/compare/jsch-0.2.1…
https://oryx-embedded.com/download/#changelog
https://www.crushftp.com/crush10wiki/Wiki.jsp?pag…
https://github.com/connectbot/sshlib/compare/2.2.…
https://github.com/connectbot/sshlib/commit/5c8b5…
https://github.com/mscdex/ssh2/commit/97b223f8891…
https://nest.pijul.com/pijul/thrussh/changes/D6H7…
https://crates.io/crates/thrussh/versions
https://github.com/NixOS/nixpkgs/pull/275249
http://www.openwall.com/lists/oss-security/2023/12/19/5	mailing-list
https://www.freebsd.org/security/advisories/FreeB…
https://arstechnica.com/security/2023/12/hackers-…
http://www.openwall.com/lists/oss-security/2023/12/20/3	mailing-list
http://packetstormsecurity.com/files/176280/Terra…
https://github.com/proftpd/proftpd/blob/d21e7a2e4…
https://github.com/proftpd/proftpd/blob/0a7ea9b0b…
https://github.com/apache/mina-sshd/issues/445
https://github.com/hierynomus/sshj/issues/916
https://github.com/janmojzis/tinyssh/issues/81
https://www.openwall.com/lists/oss-security/2023/…
https://security-tracker.debian.org/tracker/sourc…
https://github.com/net-ssh/net-ssh/blob/2e65064a5…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://www.debian.org/security/2023/dsa-5586	vendor-advisory
https://www.lancom-systems.de/service-support/all…
https://www.theregister.com/2023/12/20/terrapin_a…
https://filezilla-project.org/versions.php
https://nova.app/releases/#v11.8
https://roumenpetrov.info/secsh/#news20231220
https://www.vandyke.com/products/securecrt/history.txt
https://help.panic.com/releasenotes/transmit5/
https://github.com/PowerShell/Win32-OpenSSH/relea…
https://github.com/PowerShell/Win32-OpenSSH/issues/2189
https://winscp.net/eng/docs/history#6.2.2
https://www.bitvise.com/ssh-client-version-history#933
https://github.com/cyd01/KiTTY/issues/520
https://www.debian.org/security/2023/dsa-5588	vendor-advisory
https://github.com/ssh-mitm/ssh-mitm/issues/165
https://news.ycombinator.com/item?id=38732005
https://lists.debian.org/debian-lts-announce/2023…	mailing-list
https://security.gentoo.org/glsa/202312-16	vendor-advisory
https://security.gentoo.org/glsa/202312-17	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.netapp.com/advisory/ntap-2024010…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://psirt.global.sonicwall.com/vuln-detail/SN…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.debian.org/debian-lts-announce/2024…	mailing-list
https://lists.debian.org/debian-lts-announce/2024…	mailing-list
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://support.apple.com/kb/HT214084
http://seclists.org/fulldisclosure/2024/Mar/21	mailing-list
https://lists.debian.org/debian-lts-announce/2024…	mailing-list
http://www.openwall.com/lists/oss-security/2024/04/17/8	mailing-list
http://www.openwall.com/lists/oss-security/2024/03/06/3	mailing-list
https://www.vicarius.io/vsociety/posts/cve-2023-4…
https://www.vicarius.io/vsociety/posts/cve-2023-4…
https://lists.debian.org/debian-lts-announce/2025…
https://lists.debian.org/debian-lts-announce/2024…
https://lists.debian.org/debian-lts-announce/2024…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

4 products

Vendor	Product	Version
Siemens	RUGGEDCOM APE1808	Affected: 0 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.5 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.5 , < * (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.5 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T22:05:21.417Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit"
          },
          {
            "url": "https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://matt.ucc.asn.au/dropbear/CHANGES"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.netsarang.com/en/xshell-update-history/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.paramiko.org/changelog.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openssh.com/openbsd.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/openssh/openssh-portable/commits/master"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.bitvise.com/ssh-server-version-history"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/ronf/asyncssh/tags"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://gitlab.com/libssh/libssh-mirror/-/tags"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openssh.com/txt/release-9.6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.terrapin-attack.com"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://thorntech.com/cve-2023-48795-and-sftp-gateway/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/warp-tech/russh/releases/tag/v0.40.2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2023/12/18/2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://twitter.com/TrueSkrillor/status/1736774389725565005"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/paramiko/paramiko/issues/2337"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://news.ycombinator.com/item?id=38684904"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://news.ycombinator.com/item?id=38685286"
          },
          {
            "name": "[oss-security] 20231218 CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/12/18/3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/mwiede/jsch/issues/457"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/erlang/otp/releases/tag/OTP-26.2.1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/advisories/GHSA-45x7-px36-x8w8"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security-tracker.debian.org/tracker/source-package/libssh2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security-tracker.debian.org/tracker/CVE-2023-48795"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1217950"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254210"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugs.gentoo.org/920280"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://ubuntu.com/security/CVE-2023-48795"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/cve-2023-48795"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/mwiede/jsch/pull/461"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/drakkan/sftpgo/releases/tag/v2.5.6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/libssh2/libssh2/pull/1291"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://forum.netgate.com/topic/184941/terrapin-ssh-attack"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/rapier1/hpn-ssh/releases"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/proftpd/proftpd/issues/456"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/TeraTermProject/teraterm/releases/tag/v5.1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://oryx-embedded.com/download/#changelog"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://crates.io/crates/thrussh/versions"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/NixOS/nixpkgs/pull/275249"
          },
          {
            "name": "[oss-security] 20231219 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/12/19/5"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/"
          },
          {
            "name": "[oss-security] 20231220 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/12/20/3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/apache/mina-sshd/issues/445"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/hierynomus/sshj/issues/916"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/janmojzis/tinyssh/issues/81"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2023/12/20/3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security-tracker.debian.org/tracker/source-package/trilead-ssh2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16"
          },
          {
            "name": "FEDORA-2023-0733306be9",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/"
          },
          {
            "name": "DSA-5586",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5586"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.theregister.com/2023/12/20/terrapin_attack_ssh"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://filezilla-project.org/versions.php"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://nova.app/releases/#v11.8"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://roumenpetrov.info/secsh/#news20231220"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.vandyke.com/products/securecrt/history.txt"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://help.panic.com/releasenotes/transmit5/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/PowerShell/Win32-OpenSSH/issues/2189"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://winscp.net/eng/docs/history#6.2.2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.bitvise.com/ssh-client-version-history#933"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/cyd01/KiTTY/issues/520"
          },
          {
            "name": "DSA-5588",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5588"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/ssh-mitm/ssh-mitm/issues/165"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://news.ycombinator.com/item?id=38732005"
          },
          {
            "name": "[debian-lts-announce] 20231226 [SECURITY] [DLA 3694-1] openssh security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html"
          },
          {
            "name": "GLSA-202312-16",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202312-16"
          },
          {
            "name": "GLSA-202312-17",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202312-17"
          },
          {
            "name": "FEDORA-2023-20feb865d8",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/"
          },
          {
            "name": "FEDORA-2023-cb8c606fbb",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/"
          },
          {
            "name": "FEDORA-2023-e77300e4b5",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/"
          },
          {
            "name": "FEDORA-2023-b87ec6cf47",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/"
          },
          {
            "name": "FEDORA-2023-153404713b",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240105-0004/"
          },
          {
            "name": "FEDORA-2024-3bb23c77f3",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/"
          },
          {
            "name": "FEDORA-2023-55800423a8",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/"
          },
          {
            "name": "FEDORA-2024-d946b9ad25",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/"
          },
          {
            "name": "FEDORA-2024-71c2c6526c",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/"
          },
          {
            "name": "FEDORA-2024-39a8c72ea9",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002"
          },
          {
            "name": "FEDORA-2024-ae653fb07b",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/"
          },
          {
            "name": "FEDORA-2024-2705241461",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/"
          },
          {
            "name": "FEDORA-2024-fb32950d11",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/"
          },
          {
            "name": "FEDORA-2024-7b08207cdb",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/"
          },
          {
            "name": "FEDORA-2024-06ebb70bdd",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/"
          },
          {
            "name": "[debian-lts-announce] 20240125 [SECURITY] [DLA 3718-1] php-phpseclib security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html"
          },
          {
            "name": "[debian-lts-announce] 20240125 [SECURITY] [DLA 3719-1] phpseclib security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html"
          },
          {
            "name": "FEDORA-2024-a53b24023d",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/"
          },
          {
            "name": "FEDORA-2024-3fd1bc9276",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT214084"
          },
          {
            "name": "20240313 APPLE-SA-03-07-2024-2 macOS Sonoma 14.4",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2024/Mar/21"
          },
          {
            "name": "[debian-lts-announce] 20240425 [SECURITY] [DLA 3794-1] putty security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html"
          },
          {
            "name": "[oss-security] 20240417 Terrapin vulnerability in Jenkins CLI client",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/04/17/8"
          },
          {
            "name": "[oss-security] 20240306 Multiple vulnerabilities in Jenkins plugins",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/03/06/3"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/"
          },
          {
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.9,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-48795",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2023-12-22T05:01:05.519910Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-354",
                "description": "CWE-354 Improper Validation of Integrity Check Value",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-27T20:45:57.733Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM APE1808",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.5",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-14T12:16:07.168Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-364175.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-915275.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-01T18:06:23.972Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html"
        },
        {
          "url": "https://matt.ucc.asn.au/dropbear/CHANGES"
        },
        {
          "url": "https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES"
        },
        {
          "url": "https://www.netsarang.com/en/xshell-update-history/"
        },
        {
          "url": "https://www.paramiko.org/changelog.html"
        },
        {
          "url": "https://www.openssh.com/openbsd.html"
        },
        {
          "url": "https://github.com/openssh/openssh-portable/commits/master"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ"
        },
        {
          "url": "https://www.bitvise.com/ssh-server-version-history"
        },
        {
          "url": "https://github.com/ronf/asyncssh/tags"
        },
        {
          "url": "https://gitlab.com/libssh/libssh-mirror/-/tags"
        },
        {
          "url": "https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/"
        },
        {
          "url": "https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42"
        },
        {
          "url": "https://www.openssh.com/txt/release-9.6"
        },
        {
          "url": "https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/"
        },
        {
          "url": "https://www.terrapin-attack.com"
        },
        {
          "url": "https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25"
        },
        {
          "url": "https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst"
        },
        {
          "url": "https://thorntech.com/cve-2023-48795-and-sftp-gateway/"
        },
        {
          "url": "https://github.com/warp-tech/russh/releases/tag/v0.40.2"
        },
        {
          "url": "https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2023/12/18/2"
        },
        {
          "url": "https://twitter.com/TrueSkrillor/status/1736774389725565005"
        },
        {
          "url": "https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d"
        },
        {
          "url": "https://github.com/paramiko/paramiko/issues/2337"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg"
        },
        {
          "url": "https://news.ycombinator.com/item?id=38684904"
        },
        {
          "url": "https://news.ycombinator.com/item?id=38685286"
        },
        {
          "name": "[oss-security] 20231218 CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2023/12/18/3"
        },
        {
          "url": "https://github.com/mwiede/jsch/issues/457"
        },
        {
          "url": "https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6"
        },
        {
          "url": "https://github.com/erlang/otp/releases/tag/OTP-26.2.1"
        },
        {
          "url": "https://github.com/advisories/GHSA-45x7-px36-x8w8"
        },
        {
          "url": "https://security-tracker.debian.org/tracker/source-package/libssh2"
        },
        {
          "url": "https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg"
        },
        {
          "url": "https://security-tracker.debian.org/tracker/CVE-2023-48795"
        },
        {
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1217950"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254210"
        },
        {
          "url": "https://bugs.gentoo.org/920280"
        },
        {
          "url": "https://ubuntu.com/security/CVE-2023-48795"
        },
        {
          "url": "https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/"
        },
        {
          "url": "https://access.redhat.com/security/cve/cve-2023-48795"
        },
        {
          "url": "https://github.com/mwiede/jsch/pull/461"
        },
        {
          "url": "https://github.com/drakkan/sftpgo/releases/tag/v2.5.6"
        },
        {
          "url": "https://github.com/libssh2/libssh2/pull/1291"
        },
        {
          "url": "https://forum.netgate.com/topic/184941/terrapin-ssh-attack"
        },
        {
          "url": "https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5"
        },
        {
          "url": "https://github.com/rapier1/hpn-ssh/releases"
        },
        {
          "url": "https://github.com/proftpd/proftpd/issues/456"
        },
        {
          "url": "https://github.com/TeraTermProject/teraterm/releases/tag/v5.1"
        },
        {
          "url": "https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15"
        },
        {
          "url": "https://oryx-embedded.com/download/#changelog"
        },
        {
          "url": "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update"
        },
        {
          "url": "https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22"
        },
        {
          "url": "https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab"
        },
        {
          "url": "https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3"
        },
        {
          "url": "https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC"
        },
        {
          "url": "https://crates.io/crates/thrussh/versions"
        },
        {
          "url": "https://github.com/NixOS/nixpkgs/pull/275249"
        },
        {
          "name": "[oss-security] 20231219 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2023/12/19/5"
        },
        {
          "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc"
        },
        {
          "url": "https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/"
        },
        {
          "name": "[oss-security] 20231220 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2023/12/20/3"
        },
        {
          "url": "http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html"
        },
        {
          "url": "https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES"
        },
        {
          "url": "https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES"
        },
        {
          "url": "https://github.com/apache/mina-sshd/issues/445"
        },
        {
          "url": "https://github.com/hierynomus/sshj/issues/916"
        },
        {
          "url": "https://github.com/janmojzis/tinyssh/issues/81"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2023/12/20/3"
        },
        {
          "url": "https://security-tracker.debian.org/tracker/source-package/trilead-ssh2"
        },
        {
          "url": "https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16"
        },
        {
          "name": "FEDORA-2023-0733306be9",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/"
        },
        {
          "name": "DSA-5586",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5586"
        },
        {
          "url": "https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508"
        },
        {
          "url": "https://www.theregister.com/2023/12/20/terrapin_attack_ssh"
        },
        {
          "url": "https://filezilla-project.org/versions.php"
        },
        {
          "url": "https://nova.app/releases/#v11.8"
        },
        {
          "url": "https://roumenpetrov.info/secsh/#news20231220"
        },
        {
          "url": "https://www.vandyke.com/products/securecrt/history.txt"
        },
        {
          "url": "https://help.panic.com/releasenotes/transmit5/"
        },
        {
          "url": "https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta"
        },
        {
          "url": "https://github.com/PowerShell/Win32-OpenSSH/issues/2189"
        },
        {
          "url": "https://winscp.net/eng/docs/history#6.2.2"
        },
        {
          "url": "https://www.bitvise.com/ssh-client-version-history#933"
        },
        {
          "url": "https://github.com/cyd01/KiTTY/issues/520"
        },
        {
          "name": "DSA-5588",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5588"
        },
        {
          "url": "https://github.com/ssh-mitm/ssh-mitm/issues/165"
        },
        {
          "url": "https://news.ycombinator.com/item?id=38732005"
        },
        {
          "name": "[debian-lts-announce] 20231226 [SECURITY] [DLA 3694-1] openssh security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html"
        },
        {
          "name": "GLSA-202312-16",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202312-16"
        },
        {
          "name": "GLSA-202312-17",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202312-17"
        },
        {
          "name": "FEDORA-2023-20feb865d8",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/"
        },
        {
          "name": "FEDORA-2023-cb8c606fbb",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/"
        },
        {
          "name": "FEDORA-2023-e77300e4b5",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/"
        },
        {
          "name": "FEDORA-2023-b87ec6cf47",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/"
        },
        {
          "name": "FEDORA-2023-153404713b",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240105-0004/"
        },
        {
          "name": "FEDORA-2024-3bb23c77f3",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/"
        },
        {
          "name": "FEDORA-2023-55800423a8",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/"
        },
        {
          "name": "FEDORA-2024-d946b9ad25",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/"
        },
        {
          "name": "FEDORA-2024-71c2c6526c",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/"
        },
        {
          "name": "FEDORA-2024-39a8c72ea9",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/"
        },
        {
          "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002"
        },
        {
          "name": "FEDORA-2024-ae653fb07b",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/"
        },
        {
          "name": "FEDORA-2024-2705241461",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/"
        },
        {
          "name": "FEDORA-2024-fb32950d11",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/"
        },
        {
          "name": "FEDORA-2024-7b08207cdb",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/"
        },
        {
          "name": "FEDORA-2024-06ebb70bdd",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/"
        },
        {
          "name": "[debian-lts-announce] 20240125 [SECURITY] [DLA 3718-1] php-phpseclib security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html"
        },
        {
          "name": "[debian-lts-announce] 20240125 [SECURITY] [DLA 3719-1] phpseclib security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html"
        },
        {
          "name": "FEDORA-2024-a53b24023d",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/"
        },
        {
          "name": "FEDORA-2024-3fd1bc9276",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/"
        },
        {
          "url": "https://support.apple.com/kb/HT214084"
        },
        {
          "name": "20240313 APPLE-SA-03-07-2024-2 macOS Sonoma 14.4",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2024/Mar/21"
        },
        {
          "name": "[debian-lts-announce] 20240425 [SECURITY] [DLA 3794-1] putty security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html"
        },
        {
          "name": "[oss-security] 20240417 Terrapin vulnerability in Jenkins CLI client",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2024/04/17/8"
        },
        {
          "name": "[oss-security] 20240306 Multiple vulnerabilities in Jenkins plugins",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2024/03/06/3"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-48795",
    "datePublished": "2023-12-18T00:00:00.000Z",
    "dateReserved": "2023-11-20T00:00:00.000Z",
    "dateUpdated": "2026-07-14T12:16:07.168Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-48916 (GCVE-0-2024-48916)

Vulnerability from cvelistv5 – Published: 2025-07-30 19:45 – Updated: 2025-07-30 19:54

Title

Ceph is vulnerable to authentication bypass through RadosGW

Summary

Ceph is a distributed object, block, and file storage platform. In versions 19.2.3 and below, it is possible to send an JWT that has "none" as JWT alg. And by doing so the JWT signature is not checked. The vulnerability is most likely in the RadosGW OIDC provider. As of time of publication, a known patched version has yet to be published.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-07-30 19:54 UTC

CWE

CWE-345 - Insufficient Verification of Data Authenticity

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7616 records in the last 180 days details

References

1 reference

URL	Tags
https://github.com/ceph/ceph/security/advisories/…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
ceph	ceph	Affected: <= 19.2.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-48916",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-30T19:54:31.667804Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-30T19:54:42.022Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ceph",
          "vendor": "ceph",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c= 19.2.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Ceph is a distributed object, block, and file storage platform. In versions 19.2.3 and below, it is possible to send an JWT that has \"none\" as JWT alg. And by doing so the JWT signature is not checked. The vulnerability is most likely in the RadosGW OIDC provider. As of time of publication, a known patched version has yet to be published."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-345",
              "description": "CWE-345: Insufficient Verification of Data Authenticity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-30T19:45:00.454Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/ceph/ceph/security/advisories/GHSA-5g9m-mmp6-93mq",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/ceph/ceph/security/advisories/GHSA-5g9m-mmp6-93mq"
        }
      ],
      "source": {
        "advisory": "GHSA-5g9m-mmp6-93mq",
        "discovery": "UNKNOWN"
      },
      "title": "Ceph is vulnerable to authentication bypass through RadosGW"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-48916",
    "datePublished": "2025-07-30T19:45:00.454Z",
    "dateReserved": "2024-10-09T22:06:46.172Z",
    "dateUpdated": "2025-07-30T19:54:42.022Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-30156 (GCVE-0-2025-30156)

Vulnerability from cvelistv5 – Published: 2026-08-27 20:34 – Updated: 2026-09-01 03:56

Title

Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery

Summary

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message authentication, allowing an attacker to forge credentials and gain cluster-wide access. Because the ciphertext is malleable and the monitor will encrypt attacker-chosen entity names, an attacker holding one low-privilege key and able to observe CephX traffic can use the monitor as an encryption oracle and splice ciphertext blocks into valid tickets for privileged entities such as Manager, MDS, and OSD. The same lack of authentication also lets an attacker with CephX permissions escalate privileges by flipping a single bit in a service ticket to set its allow_all field to true. This issue is fixed in versions 20.2.4 and 19.2.6.

Severity

8.9 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-31 00:00 UTC

CWE

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7616 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/ceph/ceph/security/advisories/…	x_refsource_CONFIRM
https://github.com/ceph/ceph/commit/2ba086255de09…	x_refsource_MISC
https://github.com/ceph/ceph/commit/3078188a7bdd8…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
ceph	ceph	Affected: < 19.2.6 Affected: >= 20.0.0, < 20.2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-30156",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-31T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-01T03:56:14.462Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ceph",
          "vendor": "ceph",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 19.2.6"
            },
            {
              "status": "affected",
              "version": "\u003e= 20.0.0, \u003c 20.2.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message authentication, allowing an attacker to forge credentials and gain cluster-wide access. Because the ciphertext is malleable and the monitor will encrypt attacker-chosen entity names, an attacker holding one low-privilege key and able to observe CephX traffic can use the monitor as an encryption oracle and splice ciphertext blocks into valid tickets for privileged entities such as Manager, MDS, and OSD. The same lack of authentication also lets an attacker with CephX permissions escalate privileges by flipping a single bit in a service ticket to set its allow_all field to true. This issue is fixed in versions 20.2.4 and 19.2.6."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.9,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-327",
              "description": "CWE-327: Use of a Broken or Risky Cryptographic Algorithm",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-27T20:34:41.822Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/ceph/ceph/security/advisories/GHSA-7q3q-3975-qw3q",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/ceph/ceph/security/advisories/GHSA-7q3q-3975-qw3q"
        },
        {
          "name": "https://github.com/ceph/ceph/commit/2ba086255de09c8b95177717cc7e9dd4377e2f0f",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ceph/ceph/commit/2ba086255de09c8b95177717cc7e9dd4377e2f0f"
        },
        {
          "name": "https://github.com/ceph/ceph/commit/3078188a7bdd89e2975280f2a906c71c2f6effd6",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ceph/ceph/commit/3078188a7bdd89e2975280f2a906c71c2f6effd6"
        }
      ],
      "source": {
        "advisory": "GHSA-7q3q-3975-qw3q",
        "discovery": "UNKNOWN"
      },
      "title": "Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-30156",
    "datePublished": "2026-08-27T20:34:41.822Z",
    "dateReserved": "2025-03-17T12:41:42.566Z",
    "dateUpdated": "2026-09-01T03:56:14.462Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-21721 (GCVE-0-2026-21721)

Vulnerability from cvelistv5 – Published: 2026-01-27 09:07 – Updated: 2026-08-27 17:22

Title

Dashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation

Summary

The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-28 04:55 UTC

CWE

CWE-863 - Incorrect Authorization
CWE-639 - Authorization Bypass Through User-Controlled Key

Assigner

GRAFANA CNA under the mitre root

CNA scorecard C 70/100 over 47 records in the last 180 days details

References

11 references

URL	Tags
https://grafana.com/security/security-advisories/…	vendor-advisory
https://access.redhat.com/security/cve/CVE-2026-21721	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2433242	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:3078	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:2914	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:3529	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:2920	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41064	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:5633	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:8229	vendor-advisoryx_refsource_REDHAT

Impacted products

22 products

Vendor	Product	Version
Grafana	grafana/grafana	Affected: 12.3.0 , < 12.3.1 (semver)
Grafana	grafana/grafana	Affected: 12.2.0 , < 12.2.3 (semver)
Grafana	grafana/grafana	Affected: 12.1.0 , < 12.1.5 (semver)
Grafana	grafana/grafana	Affected: 12.0.0 , < 12.0.8 (semver)
Grafana	grafana/grafana	Affected: 10.2.0 , < 11.6.9 (semver)
Grafana	grafana/grafana-enterprise	Affected: 10.2.0 , < 11.6.9 (semver)
Grafana	grafana/grafana-enterprise	Affected: 12.0.0 , < 12.0.8 (semver)
Grafana	grafana/grafana-enterprise	Affected: 12.1.0 , < 12.1.5 (semver)
Grafana	grafana/grafana-enterprise	Affected: 12.2.0 , < 12.2.3 (semver)
Grafana	grafana/grafana-enterprise	Affected: 12.3.0 , < 12.3.1 (semver)
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:10.2.6-22.el10_1 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:10.2.6-20.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:10.2.6-18.el9_7 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:10.2.6-17.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1783578847 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.12	Unaffected: 1774002166 , < * (rpm) cpe:/a:redhat:acm:2.12::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1774950654 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Multicluster Global Hub	cpe:/a:redhat:multicluster_globalhub
Red Hat	Red Hat Ceph Storage 5	cpe:/a:redhat:ceph_storage:5
Red Hat	Red Hat Ceph Storage 6	cpe:/a:redhat:ceph_storage:6
Red Hat	Red Hat Ceph Storage 8	cpe:/a:redhat:ceph_storage:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8

Date Public

2026-01-27 09:05

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-21721",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-28T04:55:19.556498Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T21:45:54.908Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.1"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-22.el10_1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-20.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-18.el9_7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-17.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-grafana-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783578847",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-grafana-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1774002166",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-grafana-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1774950654",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
            "product": "Multicluster Global Hub",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:5"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/grafana-rhel9",
            "product": "Red Hat Ceph Storage 5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:5"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel8/grafana",
            "product": "Red Hat Ceph Storage 5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:5"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9/grafana",
            "product": "Red Hat Ceph Storage 5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/grafana-rhel9",
            "product": "Red Hat Ceph Storage 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel8/grafana",
            "product": "Red Hat Ceph Storage 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9/grafana",
            "product": "Red Hat Ceph Storage 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/grafana-rhel9",
            "product": "Red Hat Ceph Storage 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel8/grafana",
            "product": "Red Hat Ceph Storage 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9/grafana",
            "product": "Red Hat Ceph Storage 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-01-27T09:07:55.160Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "An authorization error has been discovered in Grafana dashboards. The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization\u2011internal privilege escalation."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-639",
                "description": "Authorization Bypass Through User-Controlled Key",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-20T12:04:51.023Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-21721"
          },
          {
            "name": "RHBZ#2433242",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433242"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21721.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:3078"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2914"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:3529"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:2920"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41064"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:5633"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:8229"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:3078: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2914: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:3529: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:2920: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41064: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:5633: Red Hat Advanced Cluster Management for Kubernetes 2.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:8229: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-01-27T10:02:34.317Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-01-27T09:07:55.160Z",
            "value": "Made public."
          }
        ],
        "title": "grafana/grafana/pkg/services/dashboards: Grafana Dashboard Permissions Scope Bypass Enables Cross\u2011Dashboard Privilege Escalation",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "grafana/grafana",
          "vendor": "Grafana",
          "versions": [
            {
              "lessThan": "12.3.1",
              "status": "affected",
              "version": "12.3.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "grafana/grafana",
          "vendor": "Grafana",
          "versions": [
            {
              "lessThan": "12.2.3",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "grafana/grafana",
          "vendor": "Grafana",
          "versions": [
            {
              "lessThan": "12.1.5",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "grafana/grafana",
          "vendor": "Grafana",
          "versions": [
            {
              "lessThan": "12.0.8",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "grafana/grafana",
          "vendor": "Grafana",
          "versions": [
            {
              "lessThan": "11.6.9",
              "status": "affected",
              "version": "10.2.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "grafana/grafana-enterprise",
          "vendor": "Grafana",
          "versions": [
            {
              "lessThan": "11.6.9",
              "status": "affected",
              "version": "10.2.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "grafana/grafana-enterprise",
          "vendor": "Grafana",
          "versions": [
            {
              "lessThan": "12.0.8",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "grafana/grafana-enterprise",
          "vendor": "Grafana",
          "versions": [
            {
              "lessThan": "12.1.5",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "grafana/grafana-enterprise",
          "vendor": "Grafana",
          "versions": [
            {
              "lessThan": "12.2.3",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "grafana/grafana-enterprise",
          "vendor": "Grafana",
          "versions": [
            {
              "lessThan": "12.3.1",
              "status": "affected",
              "version": "12.3.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2026-01-27T09:05:28.422Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "type": "text/markdown",
              "value": "The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization\u2011internal privilege escalation."
            }
          ],
          "value": "The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization\u2011internal privilege escalation."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-27T17:22:33.569Z",
        "orgId": "57da9224-a3e2-4646-9d0e-c4dc2e05e7da",
        "shortName": "GRAFANA"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://grafana.com/security/security-advisories/cve-2026-21721"
        }
      ],
      "source": {
        "discovery": "BUG_BOUNTY"
      },
      "title": "Dashboard Permissions Scope Bypass Enables Cross\u2011Dashboard Privilege Escalation",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "57da9224-a3e2-4646-9d0e-c4dc2e05e7da",
    "assignerShortName": "GRAFANA",
    "cveId": "CVE-2026-21721",
    "datePublished": "2026-01-27T09:07:55.160Z",
    "dateReserved": "2026-01-05T09:26:06.214Z",
    "dateUpdated": "2026-08-27T17:22:33.569Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-39944 (GCVE-0-2026-39944)

Vulnerability from cvelistv5 – Published: 2026-08-27 20:47 – Updated: 2026-09-01 03:56

Title

Ceph: CephX AES Authentication error

Summary

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway (RGW) protects STS session tokens with an AES-128-CBC handler that provides no message authentication, allowing an attacker who holds any valid STS token to tamper with it undetected and escalate to full RGW administrative access. Because the ciphertext is unauthenticated, the attacker can perform a CBC bit-flip on the acct_type, perm_type, and is_admin fields of their own token, and a forged is_admin value triggers a global administrative override that bypasses all capability checks. The attack is reachable remotely over the RGW S3 endpoint and is a self-contained modification of a token the attacker already possesses, requiring no encryption oracle and no network observation. It requires only a single valid STS token, which need not carry any elevated privileges, with STS enabled. This issue is fixed in versions 20.2.4 and 19.2.6.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-31 00:00 UTC

CWE

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7616 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/ceph/ceph/security/advisories/…	x_refsource_CONFIRM
https://github.com/ceph/ceph/releases/tag/v19.2.6	x_refsource_MISC
https://github.com/ceph/ceph/releases/tag/v20.2.4	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
ceph	ceph	Affected: >= 19.0.0, < 19.2.6 Affected: >= 20.0.0, < 20.2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-39944",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-31T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-01T03:56:15.659Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ceph",
          "vendor": "ceph",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 19.0.0, \u003c 19.2.6"
            },
            {
              "status": "affected",
              "version": "\u003e= 20.0.0, \u003c 20.2.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway (RGW) protects STS session tokens with an AES-128-CBC handler that provides no message authentication, allowing an attacker who holds any valid STS token to tamper with it undetected and escalate to full RGW administrative access. Because the ciphertext is unauthenticated, the attacker can perform a CBC bit-flip on the acct_type, perm_type, and is_admin fields of their own token, and a forged is_admin value triggers a global administrative override that bypasses all capability checks. The attack is reachable remotely over the RGW S3 endpoint and is a self-contained modification of a token the attacker already possesses, requiring no encryption oracle and no network observation. It requires only a single valid STS token, which need not carry any elevated privileges, with STS enabled. This issue is fixed in versions 20.2.4 and 19.2.6."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-327",
              "description": "CWE-327: Use of a Broken or Risky Cryptographic Algorithm",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-27T20:47:01.512Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/ceph/ceph/security/advisories/GHSA-j73r-qrgx-jvq2",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/ceph/ceph/security/advisories/GHSA-j73r-qrgx-jvq2"
        },
        {
          "name": "https://github.com/ceph/ceph/releases/tag/v19.2.6",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ceph/ceph/releases/tag/v19.2.6"
        },
        {
          "name": "https://github.com/ceph/ceph/releases/tag/v20.2.4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ceph/ceph/releases/tag/v20.2.4"
        }
      ],
      "source": {
        "advisory": "GHSA-j73r-qrgx-jvq2",
        "discovery": "UNKNOWN"
      },
      "title": "Ceph: CephX AES Authentication error"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-39944",
    "datePublished": "2026-08-27T20:47:01.512Z",
    "dateReserved": "2026-04-07T22:40:33.820Z",
    "dateUpdated": "2026-09-01T03:56:15.659Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-41680 (GCVE-0-2026-41680)

Vulnerability from cvelistv5 – Published: 2026-04-24 17:26 – Updated: 2026-04-24 19:08

Title

Marked: OOM Denial of Service via Infinite Recursion in marked Tokenizer

Summary

Marked is a markdown parser and compiler. From 18.0.0 to 18.0.1, a critical Denial of Service (DoS) vulnerability exists in marked. By providing a specific 3-byte input sequence a tab, a vertical tab, and a newline (\x09\x0b\n)—an unauthenticated attacker can trigger an infinite recursion loop during parsing. This leads to unbounded memory allocation, causing the host Node.js application to crash via Memory Exhaustion (OOM). This vulnerability is fixed in 18.0.2.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-24 19:07 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-674 - Uncontrolled Recursion
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7616 records in the last 180 days details

References

1 reference

URL	Tags
https://github.com/markedjs/marked/security/advis…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
markedjs	marked	Affected: >= 18.0.0, < 18.0.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-41680",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-24T19:07:49.403065Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-24T19:08:41.300Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/markedjs/marked/security/advisories/GHSA-6v9c-7cg6-27q7"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "marked",
          "vendor": "markedjs",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 18.0.0, \u003c 18.0.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Marked is a markdown parser and compiler. From 18.0.0 to 18.0.1, a critical Denial of Service (DoS) vulnerability exists in marked. By providing a specific 3-byte input sequence a tab, a vertical tab, and a newline (\\x09\\x0b\\n)\u2014an unauthenticated attacker can trigger an infinite recursion loop during parsing. This leads to unbounded memory allocation, causing the host Node.js application to crash via Memory Exhaustion (OOM). This vulnerability is fixed in 18.0.2."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-674",
              "description": "CWE-674: Uncontrolled Recursion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-835",
              "description": "CWE-835: Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-24T17:26:27.847Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/markedjs/marked/security/advisories/GHSA-6v9c-7cg6-27q7",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/markedjs/marked/security/advisories/GHSA-6v9c-7cg6-27q7"
        }
      ],
      "source": {
        "advisory": "GHSA-6v9c-7cg6-27q7",
        "discovery": "UNKNOWN"
      },
      "title": "Marked: OOM Denial of Service via Infinite Recursion in marked Tokenizer"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-41680",
    "datePublished": "2026-04-24T17:26:27.847Z",
    "dateReserved": "2026-04-22T03:53:24.406Z",
    "dateUpdated": "2026-04-24T19:08:41.300Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-50152 (GCVE-0-2026-50152)

Vulnerability from cvelistv5 – Published: 2026-08-27 20:53 – Updated: 2026-09-01 14:48

Title

Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users

Summary

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Monitor subscription handler fails to properly authorize access to the configuration-key store, allowing any CephX user with only `mon allow r` capabilities to read the entire store by sending a single crafted MMonSubscribe message. The config-key store holds sensitive secrets including OSD LUKS disk-encryption passphrases and, on cephadm-managed clusters, the SSH private key that cephadm uses to reach every host in the cluster. Because that key grants root on every node under the default cephadm configuration, a low-privileged read-only account can escalate to full cluster and host compromise. This issue is fixed in versions 20.2.4 and 19.2.6

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-01 03:56 UTC

CWE

CWE-285 - Improper Authorization

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7616 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/ceph/ceph/security/advisories/…	x_refsource_CONFIRM
https://github.com/ceph/ceph/commit/d971bb2b6199f…	x_refsource_MISC
https://github.com/ceph/ceph/commit/f2840d2fd338a…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
ceph	ceph	Affected: >= 19.0.0, < 19.2.6 Affected: >= 20.0.0, < 20.2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-50152",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-01T03:56:17.495692Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-01T14:48:11.476Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ceph",
          "vendor": "ceph",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 19.0.0, \u003c 19.2.6"
            },
            {
              "status": "affected",
              "version": "\u003e= 20.0.0, \u003c 20.2.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Monitor subscription handler fails to properly authorize access to the configuration-key store, allowing any CephX user with only \u00a0`mon allow r` capabilities to read the entire store by sending a single crafted MMonSubscribe message. The config-key store holds sensitive secrets including OSD LUKS disk-encryption passphrases and, on cephadm-managed clusters, the SSH private key that cephadm uses to reach every host in the cluster. Because that key grants root on every node under the default cephadm configuration, a low-privileged read-only account can escalate to full cluster and host compromise. This issue is fixed in versions 20.2.4 and 19.2.6"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-285",
              "description": "CWE-285: Improper Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-27T20:53:42.353Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/ceph/ceph/security/advisories/GHSA-rg9p-5xcp-wm8h",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/ceph/ceph/security/advisories/GHSA-rg9p-5xcp-wm8h"
        },
        {
          "name": "https://github.com/ceph/ceph/commit/d971bb2b6199f70b1708a20a63fa944ee7a94727",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ceph/ceph/commit/d971bb2b6199f70b1708a20a63fa944ee7a94727"
        },
        {
          "name": "https://github.com/ceph/ceph/commit/f2840d2fd338ab5de2865f0f78684bbf7b888c84",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ceph/ceph/commit/f2840d2fd338ab5de2865f0f78684bbf7b888c84"
        }
      ],
      "source": {
        "advisory": "GHSA-rg9p-5xcp-wm8h",
        "discovery": "UNKNOWN"
      },
      "title": "Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-50152",
    "datePublished": "2026-08-27T20:53:42.353Z",
    "dateReserved": "2026-06-03T20:54:20.431Z",
    "dateUpdated": "2026-09-01T14:48:11.476Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-54330 (GCVE-0-2026-54330)

Vulnerability from cvelistv5 – Published: 2026-08-27 20:59 – Updated: 2026-09-01 03:56

Title

Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation

Summary

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Ceph Object Gateway (RGW) SigV4 handler does not reject requests that carry x-amz-* headers absent from the signed header set, allowing anyone holding a presigned URL to attach arbitrary unsigned x-amz-* headers that RGW will honor. AWS S3 requires every x-amz-* header on a SigV4 request to be signed and rejects requests bearing additional unsigned headers, but RGW validates only the headers listed in X-Amz-SignedHeaders and ignores any extra ones, so they take effect without being covered by the signature. By adding such headers to a presigned PUT URL, an attacker can grant themselves more capabilities than the URL's signer intended and escalate their privileges. This issue is fixed in versions 20.2.4 and 19.2.6.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-31 00:00 UTC

CWE

CWE-347 - Improper Verification of Cryptographic Signature

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7616 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/ceph/ceph/security/advisories/…	x_refsource_CONFIRM
https://github.com/ceph/ceph/commit/5837aa8e60471…	x_refsource_MISC
https://github.com/ceph/ceph/commit/5978c866d4a08…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
ceph	ceph	Affected: >= 19.0.0, < 19.2.6 Affected: >= 20.0.0, < 20.2.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-54330",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-31T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-01T03:56:17.801Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ceph",
          "vendor": "ceph",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 19.0.0, \u003c 19.2.6"
            },
            {
              "status": "affected",
              "version": "\u003e= 20.0.0, \u003c 20.2.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Ceph Object Gateway (RGW) SigV4 handler does not reject requests that carry x-amz-* headers absent from the signed header set, allowing anyone holding a presigned URL to attach arbitrary unsigned x-amz-* headers that RGW will honor. AWS S3 requires every x-amz-* header on a SigV4 request to be signed and rejects requests bearing additional unsigned headers, but RGW validates only the headers listed in X-Amz-SignedHeaders and ignores any extra ones, so they take effect without being covered by the signature. By adding such headers to a presigned PUT URL, an attacker can grant themselves more capabilities than the URL\u0027s signer intended and escalate their privileges. This issue is fixed in versions 20.2.4 and 19.2.6."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "CWE-347: Improper Verification of Cryptographic Signature",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-27T20:59:24.688Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/ceph/ceph/security/advisories/GHSA-rmjq-ffrm-j6vj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/ceph/ceph/security/advisories/GHSA-rmjq-ffrm-j6vj"
        },
        {
          "name": "https://github.com/ceph/ceph/commit/5837aa8e60471128dbb672b0ff6f1b1feebe08a7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ceph/ceph/commit/5837aa8e60471128dbb672b0ff6f1b1feebe08a7"
        },
        {
          "name": "https://github.com/ceph/ceph/commit/5978c866d4a0812fbb024745c4f1e79aaecd6c6a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ceph/ceph/commit/5978c866d4a0812fbb024745c4f1e79aaecd6c6a"
        }
      ],
      "source": {
        "advisory": "GHSA-rmjq-ffrm-j6vj",
        "discovery": "UNKNOWN"
      },
      "title": "Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-54330",
    "datePublished": "2026-08-27T20:59:24.688Z",
    "dateReserved": "2026-06-12T18:42:02.224Z",
    "dateUpdated": "2026-09-01T03:56:17.801Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:79243

CVE-2021-43565 (GCVE-0-2021-43565)

CVE-2022-27191 (GCVE-0-2022-27191)

CVE-2023-48795 (GCVE-0-2023-48795)

CVE-2024-48916 (GCVE-0-2024-48916)

CVE-2025-30156 (GCVE-0-2025-30156)

CVE-2026-21721 (GCVE-0-2026-21721)

CVE-2026-39944 (GCVE-0-2026-39944)

CVE-2026-41680 (GCVE-0-2026-41680)

CVE-2026-50152 (GCVE-0-2026-50152)

CVE-2026-54330 (GCVE-0-2026-54330)

Tags

Sightings

Nomenclature

Related by attack behaviour