Vulnerability Description
An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitize other_keys, allowing key reuse. An attacker who can request a global_id can exploit the ability of any user to request a global_id previously associated with another user, as ceph does not force the reuse of old keys to generate new ones. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linuxfoundation | Ceph | < 14.2.21 |
| Redhat | Ceph Storage | 4.0 |
| Fedoraproject | Fedora | 32 |
| Debian | Debian Linux | 10.0 |
Related Weaknesses (CWE)
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1938031Issue TrackingPatchThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/10/msg00034.htmlMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproMailing ListThird Party Advisory
- https://security.gentoo.org/glsa/202105-39Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1938031Issue TrackingPatchThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/10/msg00034.htmlMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproMailing ListThird Party Advisory
- https://security.gentoo.org/glsa/202105-39Third Party Advisory
FAQ
What is CVE-2021-20288?
CVE-2021-20288 is a vulnerability with a CVSS score of 7.2 (HIGH). An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitize other_keys, allowing key reuse. An attacker who c...
How severe is CVE-2021-20288?
CVE-2021-20288 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-20288?
Check the references section above for vendor advisories and patch information. Affected products include: Linuxfoundation Ceph, Redhat Ceph Storage, Fedoraproject Fedora, Debian Debian Linux.