UBUNTU-CVE-2020-10736

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2020-10736

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-10736.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2020-10736

Upstream

CVE-2020-10736

Downstream

USN-4706-1

Related

USN-4706-1

Published

2020-06-22T18:15:00Z

Modified

2025-09-08T16:46:02Z

Severity

8.0 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
8.0 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.

References

Affected packages

Ubuntu:20.04:LTS / ceph

Package

Name: ceph
Purl: pkg:deb/ubuntu/ceph@15.2.7-0ubuntu0.20.04.2?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

15.2.7-0ubuntu0.20.04.2

Affected versions

14.*

14.2.2-0ubuntu3

14.2.2-0ubuntu4

14.2.4-0ubuntu1

14.2.4-0ubuntu2

14.2.4-0ubuntu3

15.*

15.1.0-0ubuntu2

15.1.0-0ubuntu3

15.1.1-0ubuntu1

15.2.0-0ubuntu1

15.2.0-0ubuntu2

15.2.1-0ubuntu1

15.2.1-0ubuntu2

15.2.3-0ubuntu0.20.04.1

15.2.3-0ubuntu0.20.04.2

15.2.5-0ubuntu0.20.04.1

15.2.7-0ubuntu0.20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph-base"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph-common"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph-fuse"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph-immutable-object-cache"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph-mds"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph-mgr"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph-mgr-cephadm"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph-mgr-dashboard"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph-mgr-diskprediction-cloud"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph-mgr-diskprediction-local"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph-mgr-k8sevents"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph-mgr-modules-core"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph-mgr-rook"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph-mon"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph-osd"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "ceph-resource-agents"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "cephadm"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "cephfs-shell"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "libcephfs-dev"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "libcephfs-java"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "libcephfs-jni"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "libcephfs2"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "librados-dev"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "librados2"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "libradospp-dev"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "libradosstriper-dev"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "libradosstriper1"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "librbd-dev"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "librbd1"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "librgw-dev"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "librgw2"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "python3-ceph"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "python3-ceph-argparse"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "python3-ceph-common"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "python3-cephfs"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "python3-rados"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "python3-rbd"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "python3-rgw"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "rados-objclass-dev"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "radosgw"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "rbd-fuse"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "rbd-mirror"
        },
        {
            "binary_version": "15.2.7-0ubuntu0.20.04.2",
            "binary_name": "rbd-nbd"
        }
    ],
    "availability": "No subscription required"
}