NVD

Id
25593  
Name
CVE-2015-4053  
Description
The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-06-08  
Modified Date
2015-06-25  
Seq
2015-4053  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
135417 25593 CVE-2015-4053 RHSA-2015:1092  View
135418 25593 CVE-2015-4053 http://tracker.ceph.com/issues/11694  View
135419 25593 CVE-2015-4053 [oss-security] 20150409 CVE Request for ceph-deploy world-readable keyring permissions  View
135420 25593 CVE-2015-4053 [oss-security] 20150521 Re: CVE Request for ceph-deploy copying keyring to /etc/ceph which is world readable  View
135421 25593 CVE-2015-4053 74775  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7643 JVNDB-2015-002963 ceph-deploy の admin コマンドにおける重要な情報を取得される脆弱性 ceph-deploy の admin コマンドは、/etc/ceph/ceph.client.admin.keyring に対して誰でも読み取り可能な (world-readable) 権限を使用するため、重要な情報を取得される脆弱性が存在します。 CVE-2015-4053 81278 CVE-2015-4053 25593 2.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002963.html 2015-05-21 2015-06-23 View