CVE-2024-48916 is an authentication bypass vulnerability affecting the CEPH RadosGW component within Red Hat Ceph Storage 8.0. This vulnerability allows an attacker to bypass authentication controls in the RadosGW service, potentially enabling unauthorized access. Red Hat has issued updated container images incorporating fixes for this issue. The updated images are based on Red Hat Ceph Storage 8.0 and Red Hat Enterprise Linux versions 9.4 and 9.5. Users should apply all previously released errata and then update to the new container images available in the Red Hat Ecosystem Catalog. The advisory references multiple bugzilla entries related to this vulnerability and directs users to the official release notes for detailed changes.

The authentication bypass in CEPH RadosGW could allow unauthorized users to access or interact with the storage gateway without proper authentication, potentially compromising the confidentiality or integrity of stored data. Red Hat classifies this vulnerability as high severity, indicating a significant security risk if exploited. No known exploits in the wild have been reported at the time of the advisory.

Red Hat has released updated container images that fix the authentication bypass vulnerability. Users should ensure all previously released errata are applied before updating. The recommended mitigation is to pull and deploy the updated Red Hat Ceph Storage 8.0 container images from the Red Hat Ecosystem Catalog. Refer to Red Hat's official update instructions and release notes for detailed guidance. No additional mitigation steps are indicated in the advisory.