Red Hat Ceph Storage container images based on Ceph 7.1 contain a vulnerability (CVE-2024-31884) where the Pybind interface improperly handles SSL certificate validation. Specifically, no certificate context is passed to the constructors of imaplib.IMAP4_SSL or smtplib.SMTP_SSL, causing the system to accept any server certificate without verification. This flaw allows an attacker to perform a Man-In-The-Middle attack, potentially compromising mail server credentials or contents. The advisory references additional CVEs (CVE-2025-6176, CVE-2025-7783, CVE-2025-14104, CVE-2025-66418, CVE-2025-66471) affecting the product. Red Hat has released updated container images based on the latest ubi9 base image and Ceph 7.1 but has not provided a direct patch for the certificate validation issue that meets their standards. The vulnerability is classified under CWE-295 (Improper Certificate Validation) and related CWEs indicating resource exhaustion and memory issues. No known exploits in the wild have been reported. Red Hat scores the impact as high confidentiality impact with low integrity impact and no availability impact. The advisory recommends pulling updated container images from the Red Hat registry but notes no mitigation currently meets their criteria.

The vulnerability allows an attacker to bypass SSL certificate validation, enabling Man-In-The-Middle attacks that can compromise confidentiality of mail server credentials and mail contents. The impact is high on confidentiality, low on integrity, and none on availability. This could lead to unauthorized access to sensitive information transmitted via affected Ceph components. No known active exploitation has been reported. The issue affects the trustworthiness of SSL connections within the Ceph Storage environment.

Currently, no official fix or patch meeting Red Hat's criteria for ease of use, deployment, applicability, or stability is available. Users should update to the latest Red Hat Ceph Storage container images based on ubi9 and Ceph 7.1 from the Red Hat container registry using the 'podman pull' command. Customers with a Red Hat Technical Account Manager (TAM) can consult directly for tailored advice. Monitor Red Hat advisories for future updates or patches addressing this vulnerability. No alternative mitigations are recommended by Red Hat at this time.