Detections
Analytics

Echo: ceph: security update to 20.2.4+ds-1

high Tenable Cloud Security Plugin ID 478670

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions
 prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an
 unauthenticated mode that uses a hard-coded initialization vector and no message authentication, allowing
 an attacker to forge credentials and gain cluster-wide access. Because the ciphertext is malleable and the
 monitor will encrypt attacker-chosen entity names, an attacker holding one low-privilege key and able to
 observe CephX traffic can use the monitor as an encryption oracle and splice ciphertext blocks into valid
 tickets for privileged entities such as Manager, MDS, and OSD. The same lack of authentication also lets
 an attacker with CephX permissions escalate privileges by flipping a single bit in a service ticket to set
 its allow_all field to true. This issue is fixed in versions 20.2.4 and 19.2.6. (CVE-2025-30156)

Solution

Update the ceph library and its related packages to version 20.2.4+ds-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2025-30156

Plugin Details

Severity: High

ID: 478670

Version: Revision 1.1

Type: Local

Published: 11/9/2026

Updated: 11/9/2026

Risk Information

VPR

Risk Factor: High

Score: 7

Percentile: 98

CVSS v2

Risk Factor: High

Base Score: 7.4

Temporal Score: 5.5

Vector: CVSS2#AV:A/AC:L/Au:S/C:C/I:C/A:P

CVSS Score Source: CVE-2025-30156

CVSS v3

Risk Factor: High

Base Score: 8.9

Temporal Score: 7.7

Vector: CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 8/20/2026

Vulnerability Publication Date: 8/19/2026

Reference Information

CVE: CVE-2025-30156

IAVB: 2026-B-0240