The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0081 advisory.

    Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable     version of the Ceph storage system with a Ceph management platform, deployment utilities, and support     services.

    The ceph-ansible package provides Ansible playbooks for installing, maintaining, and upgrading Red Hat     Ceph Storage.

    This package contains a new implementation of the original libtirpc, transport-independent RPC (TI-RPC)     library for NFS-Ganesha.

    NFS-GANESHA is a NFS Server running in user space. It comes with various back-end modules (called FSALs)     provided as shared objects to support different file systems and name-spaces.

    Security Fix(es):

    * ceph: User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila     (CVE-2020-27781)

    * ceph: CEPHX_V2 replay attack protection lost (CVE-2020-25660)

    * ceph-ansible: insecure ownership on /etc/ceph/iscsi-gateway.conf configuration file (CVE-2020-25677)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    These updated packages include numerous bug fixes. Space precludes documenting all of these changes in     this advisory. Users are directed to the Red Hat Ceph Storage 4.2 Release Notes for information on the     most significant of these changes:

    https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/4.2/html     /release_notes/

    All users of Red Hat Ceph Storage are advised to upgrade to these updated     packages, which provide numerous bug fixes.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

リモートのRedhat Enterprise Linux 7 / 8ホストにインストールされているパッケージは、RHSA-2021：0081アドバイザリ。

  - ceph：CEPHX_V2リプレイ攻撃に対する保護の消失（CVE-2020-25660）

  -ceph-ansible：/etc/ceph/iscsi-gateway.conf構成ファイルの安全でない所有権（CVE-2020-25677）

  - ceph：ユーザーの資格情報が、OpenStack ManilaのNative CephFS消費者によって、操作され、盗まれる可能性があります。（CVE-2020-27781）

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

遠端 Redhat Enterprise Linux 7/8 主機上安裝的多個套件受到 RHSA-2021: 0081 公告中提及的多個弱點影響。

  - ceph：CEPHX_V2 重播攻擊保護遺失 (CVE-2020-25660)

  - ceph-ansible：/etc/ceph/iscsi-gateway.conf 設定檔上的不安全擁有權 (CVE-2020-25677)

  - ceph：OpenStack Manila 的 Native CephFS 使用者可操控並竊取使用者憑證 (CVE-2020-27781)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

远程 Redhat Enterprise Linux 7 / 8 主机上安装的程序包受到 RHSA-2021: 0081 公告提及的多个漏洞的影响。

  - ceph：CEPHX_V2 重放攻击保护丢失 (CVE-2020-25660)

  - ceph-ansible：/etc/ceph/iscsi-gateway.conf 配置文件上的不安全所有权 (CVE-2020-25677)

  - ceph：OpenStack Manila 的 Native CephFS 用户可操控并窃取用户凭据 (CVE-2020-27781)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

ID	Name	Product	Family	Published	Updated	Severity
144871	RHEL 7 / 8 : Red Hat Ceph Storage 4.2 Security and Bug Fix update (Important) (RHSA-2021:0081)	Nessus	Red Hat Local Security Checks	1/12/2021	11/7/2024	high
144871	RHEL 7/8：Red Hat Ceph Storage 4.2 セキュリティおよびバグ修正の更新（重要）（RHSA-2021：0081)	Nessus	Red Hat Local Security Checks	1/12/2021	11/7/2024	high
144871	RHEL 7/8：Red Hat Ceph Storage 4.2 安全性和錯誤修正更新 (重要) (RHSA-2021: 0081)	Nessus	Red Hat Local Security Checks	1/12/2021	11/7/2024	high
144871	RHEL 7 / 8：Red Hat Ceph Storage 4.2 安全和错误补丁更新（重要）(RHSA-2021: 0081)	Nessus	Red Hat Local Security Checks	1/12/2021	11/7/2024	high

Detections

Analytics

Plugins Search

high

high

high

high