Threats Tagged 'cve-2024-48916'

Red Hat has issued a security advisory for Red Hat Ceph Storage 6.1, addressing multiple security and bug fixes. The advisory references CVE-2024-47191 and CVE-2024-48916, related to issues categorized under CWE-22 (Path Traversal) and CWE-345 (Insufficient Verification of Data Authenticity). The update includes numerous fixes but does not detail all changes in the advisory itself, directing users to the official release notes. No CVSS score is provided, but the severity is classified as high. No known exploits in the wild have been reported. The advisory applies to Red Hat Ceph Storage 6.1 and related Red Hat Enterprise Linux versions for various architectures. Users are advised to apply the update after ensuring all previous errata are applied.

Red Hat Ceph Storage 8.0 container image has an authentication bypass vulnerability in the CEPH RadosGW component (CVE-2024-48916). This vulnerability allows bypassing authentication mechanisms in the RadosGW service. Red Hat has released updated container images based on Red Hat Ceph Storage 8.0 and Red Hat Enterprise Linux 9.4/9.5 that include numerous enhancements and bug fixes addressing this issue. Users are advised to update by pulling the new images from the Red Hat Ecosystem Catalog. No CVSS score is provided, but the vulnerability is rated as high severity by Red Hat.