Количество 7
Количество 7
BDU:2025-00001
Уязвимость демона radosgw системы хранения данных Ceph, позволяющая нарушителю обойти процедуру аутентификации
ROS-20250905-04
Уязвимость ceph
CVE-2024-48916
Ceph is a distributed object, block, and file storage platform. In versions 19.2.3 and below, it is possible to send an JWT that has "none" as JWT alg. And by doing so the JWT signature is not checked. The vulnerability is most likely in the RadosGW OIDC provider. As of time of publication, a known patched version has yet to be published.
CVE-2024-48916
Ceph is a distributed object, block, and file storage platform. In versions 19.2.3 and below, it is possible to send an JWT that has "none" as JWT alg. And by doing so the JWT signature is not checked. The vulnerability is most likely in the RadosGW OIDC provider. As of time of publication, a known patched version has yet to be published.
CVE-2024-48916
Ceph is a distributed object, block, and file storage platform. In versions 19.2.3 and below, it is possible to send an JWT that has "none" as JWT alg. And by doing so the JWT signature is not checked. The vulnerability is most likely in the RadosGW OIDC provider. As of time of publication, a known patched version has yet to be published.
CVE-2024-48916
Ceph is vulnerable to authentication bypass through RadosGW
CVE-2024-48916
Ceph is a distributed object, block, and file storage platform. In ver ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-00001 Уязвимость демона radosgw системы хранения данных Ceph, позволяющая нарушителю обойти процедуру аутентификации | CVSS3: 8.1 | 0% Низкий | около 1 года назад |
 | ROS-20250905-04 Уязвимость ceph | CVSS3: 8.1 | 0% Низкий | 4 месяца назад |
 | CVE-2024-48916 Ceph is a distributed object, block, and file storage platform. In versions 19.2.3 and below, it is possible to send an JWT that has "none" as JWT alg. And by doing so the JWT signature is not checked. The vulnerability is most likely in the RadosGW OIDC provider. As of time of publication, a known patched version has yet to be published. | CVSS3: 8.1 | 0% Низкий | 6 месяцев назад |
 | CVE-2024-48916 Ceph is a distributed object, block, and file storage platform. In versions 19.2.3 and below, it is possible to send an JWT that has "none" as JWT alg. And by doing so the JWT signature is not checked. The vulnerability is most likely in the RadosGW OIDC provider. As of time of publication, a known patched version has yet to be published. | CVSS3: 9.1 | 0% Низкий | около 1 года назад |
 | CVE-2024-48916 Ceph is a distributed object, block, and file storage platform. In versions 19.2.3 and below, it is possible to send an JWT that has "none" as JWT alg. And by doing so the JWT signature is not checked. The vulnerability is most likely in the RadosGW OIDC provider. As of time of publication, a known patched version has yet to be published. | CVSS3: 8.1 | 0% Низкий | 6 месяцев назад |
 | CVE-2024-48916 Ceph is vulnerable to authentication bypass through RadosGW | CVSS3: 8.1 | 0% Низкий | 5 месяцев назад |
| CVE-2024-48916 Ceph is a distributed object, block, and file storage platform. In ver ... | CVSS3: 8.1 | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу