CVE-2020-25677

State: Published
Severity: Not scored
Published: Dec 8, 2020
Updated: Aug 4, 2024
Reserved: Sep 16, 2020

Description

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.

Scores

The record has no CVSS score.

Weaknesses

CWE-312

Affected Products

Product	Versions
ceph-ansiblen/a	ceph-ansible-4.0.41Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=1892108

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.