Known vulnerabilities in Red Hat Ceph Storage 3

Vendor: Red Hat Inc.
Software: Red Hat Ceph Storage
Version: 3
Software CPE: cpe:2.3:a:red_hat:red_hat_ceph_storage:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Red Hat Ceph Storage version 3 Red Hat Ceph Storage 3 is affected by 10 vulnerabilities: 2 medium, 8 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53692 - Improper Authentication
CVE-2021-20288		 CWE-287 Medium
No
No
 - 01.06.2021 SB2021060109
SB2021060110
SB2022041926
and 5 more
#VU20465 - Resource Management Errors
CVE-2019-10222		 CWE-399 Medium
No
No
 - 29.08.2019 SB2019082901
SB2019082902
SB2019082904
and 6 more
#VU17318 - Missing release of memory after effective lifetime
CVE-2018-16889		 CWE-401 Low
No
No
 - 30.01.2019 SB2019013011
SB2019030809
SB2019082111
and 2 more
#VU17098 - Exposure of sensitive information to an unauthorized actor
CVE-2018-14662		 CWE-200 Low
No
No
 - 21.01.2019 SB2019012103
SB2019030809
SB2019042801
and 4 more
#VU17097 - Memory corruption
CVE-2018-16846		 CWE-119 Low
No
No
 - 21.01.2019 SB2019012103
SB2019030809
SB2019042801
and 3 more
#VU15923 - Exposure of sensitive information to an unauthorized actor
CVE-2018-19039		 CWE-200 Low
No
No
 - 15.11.2018 SB2018111603
SB2018111604
SB2019041109
and 2 more
#VU14543 - Permissions, Privileges, and Access Controls
CVE-2018-1129		 CWE-264 Low
No
No
 2.5, 3 28.08.2018 SB2018082808
SB2018111511
SB2019042801
and 8 more
#VU14542 - Permissions, Privileges, and Access Controls
CVE-2018-1128		 CWE-264 Low
No
No
 2.5, 3 28.08.2018 SB2018082808
SB2018111511
SB2019042801
and 9 more
#VU14329 - Improper input validation
CVE-2018-10861		 CWE-20 Low
No
No
 2.5, 3 10.08.2018 SB2018082808
SB2018111511
SB2019042801
and 8 more
#VU11220 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2018-7262		 CWE-113 Low
No
No
 3 22.03.2018 SB2018031520
SB2018053103
SB2018082212
and 3 more