Skip to main content
CVE-2024-48916VulnerabilityPublished Updated

Red Hat Security Advisory: Updated 8.0 container image is now available in the Red Hat Ecosystem Catalog

Affects Red HatSource GCVE Database

0

Not known to be exploited.

Data as of 26 Oct 2026, 17:16 UTC

Severity
High

Rated by Threat Radar · No CVSS score from NVD or the CNA

EPSS
0.2% chance of exploitation in 30 days – higher than 11% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 11 Dec 2024

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Affected software

ProductAffectedFixed in
Red Hat Product Security Red HatAffected
  • Red Hat
  • Red Hat Ceph Storage
  • Red Hat Ceph Storage 8.0 Tools
  • amd64
  • rhceph/grafana-rhel9@sha256:7ef83c1430a6c7286f72fad3917f67225817522317344f50feb180ac71a59116_amd64
Fixed in–

AI-suggested

Red Hat has released updated container images that fix this authentication bypass vulnerability. Users should update by pulling the new Red Hat Ceph Storage 8.0 container images from the Red Hat Ecosystem Catalog. Before applying the update, ensure all previously released errata relevant to your system have been applied. Follow Red Hat's official guidance on applying updates as detailed in their advisory.

Description

Red Hat Ceph Storage 8.0 container image contains an authentication bypass vulnerability in the CEPH RadosGW component (CVE-2024-48916). This flaw allows bypassing authentication mechanisms in the RadosGW service. Red Hat has released updated container images based on Red Hat Ceph Storage 8.0 and Red Hat Enterprise Linux 9.4/9.5 that address this issue. Users should update by pulling the new images from the Red Hat Ecosystem Catalog. The vulnerability is rated as high severity by Red Hat.

References

Community reviews

Loading reviews…