A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. Any authenticated attacker can abuse this flaw to brute-force Ceph deployments, and gain administrator access to Ceph clusters via the Ceph dashboard to initiate read, write, and delete Ceph clusters and also modify Ceph cluster configurations. Versions before ceph-ansible 6.0.0alpha1 are affected.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:2231 advisory.

  - A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used     as default passwords while deploying Ceph services. Any authenticated attacker can abuse this flaw to     brute-force Ceph deployments, and gain administrator access to Ceph clusters via the Ceph dashboard to     initiate read, write, and delete Ceph clusters and also modify Ceph cluster configurations. Versions     before ceph-ansible 6.0.0alpha1 are affected. (CVE-2020-1716)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2231 advisory.

    Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable     version of the Ceph storage system with a Ceph management platform, deployment utilities, and support     services.

    Security Fix(es):

    * ceph-ansible: hard coded credential in ceph-ansible playbook (CVE-2020-1716)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and     other related information refer to the CVE page(s) listed in the References section.

    Bug Fix(es) and Enhancement(s):

    For detailed information on changes in this release, see the Red Hat Ceph Storage 4.1 Release Notes     available at:

    https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/4.1/html/release_notes/index

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
185032	Rocky Linux 8 : Rocky Enterprise Software Foundation Ceph Storage 4.1 (RLSA-2020:2231)	Nessus	Rocky Linux Local Security Checks	high
170299	RHEL 7 / 8 : Red Hat Ceph Storage 4.1 (RHSA-2020:2231)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2020-1716

high

Tenable Plugins

high

high