Attestkeep
Language: English
Sign up

Vulnerabilities / CVE-2022-0670

critical

CVE-2022-0670

ceph: user/tenant can obtain access (read/write) to any share

Published Modified CWE 863
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.

Severity by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Red Hat8.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Bitnami9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Trivy's own label is CRITICAL. Rated critical by NVD, Azure Linux, Bitnami, CBL-Mariner. Rated lower by Red Hat (medium), Ubuntu (medium).

Description

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

Affected packages and fixed versions

SourcePackageFixed in
Azure Linux 3.0ceph0:18.2.1-1.azl3
bitnami::Bitnami Vulnerability Databaseceph15.2.17, 16.2.10, 17.2.2
CBL-Mariner 1.0ceph0:16.2.10-1.cm1
CBL-Mariner 2.0ceph0:16.2.10-1.cm2
alpine 3.13ceph15.2.17-r0
alpine 3.17ceph1616.2.10-r0
alpine 3.18ceph1616.2.10-r0
debian 11ceph14.2.21-1+deb11u2
debian 12ceph16.2.10+ds-1
debian 13ceph16.2.10+ds-1
debian 14ceph16.2.10+ds-1
echoceph16.2.10+ds-1
Show all 68 entries from 20 sources
SourcePackageFixed in
Azure Linux 3.0ceph0:18.2.1-1.azl3
bitnami::Bitnami Vulnerability Databaseceph15.2.17, 16.2.10, 17.2.2
CBL-Mariner 1.0ceph0:16.2.10-1.cm1
CBL-Mariner 2.0ceph0:16.2.10-1.cm2
alpine 3.13ceph15.2.17-r0
alpine 3.17ceph1616.2.10-r0
alpine 3.18ceph1616.2.10-r0
debian 11ceph14.2.21-1+deb11u2
debian 12ceph16.2.10+ds-1
debian 13ceph16.2.10+ds-1
debian 14ceph16.2.10+ds-1
echoceph16.2.10+ds-1
rapidfort ubuntu 20.04ceph0:17.2.5-0ubuntu0.22.04.3
rapidfort ubuntu 20.04rf-ceph0:17.2.5-0ubuntu0.22.04.3
rapidfort ubuntu 22.04ceph0:17.2.5-0ubuntu0.22.04.3
rapidfort ubuntu 22.04rf-ceph0:17.2.5-0ubuntu0.22.04.3
rapidfort ubuntu 24.04ceph0:17.2.5-0ubuntu0.22.04.3
rapidfort ubuntu 24.04rf-ceph0:17.2.5-0ubuntu0.22.04.3
Red Hatcephno fix listed
Red Hatceph-baseno fix listed
Red Hatceph-commonno fix listed
Red Hatceph-fuseno fix listed
Red Hatceph-grafana-dashboardsno fix listed
Red Hatceph-mdsno fix listed
Red Hatceph-mgrno fix listed
Red Hatceph-mgr-dashboardno fix listed
Red Hatceph-mgr-diskprediction-localno fix listed
Red Hatceph-mgr-k8seventsno fix listed
Red Hatceph-mgr-rookno fix listed
Red Hatceph-monno fix listed
Red Hatceph-osdno fix listed
Red Hatceph-radosgwno fix listed
Red Hatceph-selinuxno fix listed
Red Hatceph-testno fix listed
Red Hatlibcephfs-develno fix listed
Red Hatlibcephfs1no fix listed
Red Hatlibcephfs1-develno fix listed
Red Hatlibcephfs2no fix listed
Red Hatlibrados-develno fix listed
Red Hatlibrados2no fix listed
Red Hatlibrados2-develno fix listed
Red Hatlibradospp-develno fix listed
Red Hatlibradosstriper-develno fix listed
Red Hatlibradosstriper1no fix listed
Red Hatlibrbd-develno fix listed
Red Hatlibrbd1no fix listed
Red Hatlibrbd1-develno fix listed
Red Hatlibrgw-develno fix listed
Red Hatlibrgw2no fix listed
Red Hatlibrgw2-develno fix listed
Red Hatpython-ceph-argparseno fix listed
Red Hatpython-ceph-compatno fix listed
Red Hatpython-cephfsno fix listed
Red Hatpython-radosno fix listed
Red Hatpython-rbdno fix listed
Red Hatpython-rgwno fix listed
Red Hatpython3-ceph-argparseno fix listed
Red Hatpython3-cephfsno fix listed
Red Hatpython3-radosno fix listed
Red Hatpython3-rbdno fix listed
Red Hatpython3-rgwno fix listed
Red Hatrados-objclass-develno fix listed
Red Hatrbd-mirrorno fix listed
Red Hatrbd-nbdno fix listed
ubuntu 20.04ceph15.2.17-0ubuntu0.20.04.3
ubuntu 20.04-ESMceph15.2.17-0ubuntu0.20.04.3
ubuntu 22.04ceph17.2.5-0ubuntu0.22.04.3
ubuntu 22.10ceph17.2.5-0ubuntu0.22.10.3

References

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.