N/A

A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. Any authenticated attacker can abuse this flaw to brute-force Ceph deployments, and gain administrator access to Ceph clusters via the Ceph dashboard to initiate read, write, and delete Ceph clusters and also modify Ceph cluster configurations. Versions before ceph-ansible 6.0.0alpha1 are affected.

N/A

使用硬编码的凭证

Red Hat ceph-ansible 信任管理问题漏洞

Red Hat ceph-ansible是美国红帽（Red Hat）公司的一款用于部署分布式文件系统Ceph的Ansible手册。 ceph-ansible playbook中存在信任管理问题漏洞，该漏洞源于在部署Ceph服务时，程序使用了默认的硬编码密码。攻击者可利用该漏洞获取管理员访问权限。

N/A

N/A