CVE-2015-4053: ceph-deploy admin command world-readable permissions vulnerability
Summary
CVE-2015-4053: The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file. Affects ceph-deploy versions < 1.5.23. Fixed in 1.5.23. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
ceph-deploy is a tool used for deploying Ceph clusters. It is responsible for configuring and managing Ceph storage systems. The admin command in ceph-deploy before version 1.5.25 has a vulnerability that allows local users to obtain sensitive information by reading the world-readable file /etc/ceph/ceph.client.admin.keyring.
Vulnerability Detail
The vulnerability in ceph-deploy arises from the use of world-readable permissions for the /etc/ceph/ceph.client.admin.keyring file. This allows any local user to access and read the contents of the file, which contains sensitive information. An attacker with access to this file can potentially gain unauthorized access to the Ceph storage system and perform malicious actions. The vulnerability was assigned the CVE identifier CVE-2015-4053.
How To Fix
Minimum fixed version
1.5.23
This is the first release that contains the fix.
pip install --upgrade "ceph-deploy==1.5.23"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can manually change the permissions of the /etc/ceph/ceph.client.admin.keyring file to restrict access. This can be done by running the following command:
chmod 600 /etc/ceph/ceph.client.admin.keyring
This command sets the file permissions to read and write for the owner only, effectively preventing other users from accessing the file.
Conclusion
The vulnerability in ceph-deploy allows local users to obtain sensitive information by reading the world-readable /etc/ceph/ceph.client.admin.keyring file. To mitigate this issue, it is crucial to upgrade to ceph-deploy version 1.5.25 or later and properly restrict the permissions of sensitive files and directories within the Ceph deployment. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for ceph-deploy →
FAQ
ceph-deploy is a tool used for deploying Ceph clusters. It simplifies the process of configuring and managing Ceph storage systems.
The vulnerability allows local users to obtain sensitive information by reading the /etc/ceph/ceph.client.admin.keyring file. This can lead to unauthorized access to the Ceph storage system and potential malicious actions.
To fix this vulnerability, upgrade to ceph-deploy version 1.5.25 or later. Additionally, ensure that the permissions of sensitive files and directories within the Ceph deployment are properly restricted.
Yes, a temporary workaround is to manually change the permissions of the /etc/ceph/ceph.client.admin.keyring file to restrict access. Use the command 'chmod 600 /etc/ceph/ceph.client.admin.keyring' to set the permissions.
For more information about this vulnerability, you can refer to the official advisory database at https://github.com/pypa/advisory-database/blob/main/vulns/ceph-deploy/PYSEC-2015-3.yaml
Related vulnerabilities
Recent vulnerabilities recorded for ceph-deploy.
