CVE-2016-7031
ceph: RGW permits bucket listing when authenticated_users=read
The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.
CVSS 3.0 · 7.5 High
EPSS 1.8%
KEV · Not listed
Vendors
Products