Search vulnerabilities

Results 1

Export CSV
CVE-2016-7031

ceph: RGW permits bucket listing when authenticated_users=read

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.

CVSS 3.0 · 7.5 High EPSS 1.8% KEV · Not listed
Products