Vulnerability CVE-2022-0670

Vulnerability Name:

CVE-2022-0670 (CCN-232194)

Assigned:

2022-07-21

Published:

2022-07-21

Updated:

2022-08-15

Summary:

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

CVSS v3 Severity:

9.1 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
7.9 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): None

8.1 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
7.1 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): None

CVSS v2 Severity:

8.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): None

Vulnerability Type:

CWE-noinfo

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2022-0670

Source: CCN
Type: Ceph Web site
Ceph

Source: CCN
Type: Ceph Blog, Jul 21, 2022
v17.2.2 Quincy released

Source: MISC
Type: Release Notes, Vendor Advisory
https://ceph.io/en/news/blog/2022/v17-2-2-quincy-released/

Source: XF
Type: UNKNOWN
ceph-cve20220670-sec-bypass(232194)

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2022-67e0522b94

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2022-6d129f14f2

Vulnerable Configuration:

Configuration 1:

cpe:/a:linuxfoundation:ceph:*:*:*:*:*:*:*:* (Version >= 15.0.0 and < 15.2.17)

OR cpe:/a:linuxfoundation:ceph:*:*:*:*:*:*:*:* (Version >= 16.0.0 and < 16.2.10)

OR cpe:/a:linuxfoundation:ceph:*:*:*:*:*:*:*:* (Version >= 17.0.0 and < 17.2.2)

Configuration 2:

cpe:/a:redhat:ceph_storage:*:*:*:*:*:*:*:* (Version < 5.2)

Configuration 3:

cpe:/o:fedoraproject:fedora:35:*:*:*:*:*:*:*

OR cpe:/o:fedoraproject:fedora:36:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:7460	P	ceph-common-16.2.11.58+g38d6afd3b78-150400.3.6.1 on GA media (Moderate)	2023-06-12

BACK