RHSA-2021:1452HighCVSS 8.1

Red Hat Security Advisory: Red Hat Ceph Storage security, bug fix, and enhancement Update

Published
April 28, 2021
Last Modified
November 5, 2026

🔗 CVE IDs covered (2)

CVE-2020-25678 →CVE-2021-3139 →

📋 Description

CVE-2020-25678 — ceph: mgr modules' passwords are in clear text in mgr logs CVE-2021-3139 — tcmu-runner: SCSI target (LIO) write to any block on ILO backstore

🎯 Affected products200

  • Red Hat Ceph Storage 4.2 MON
  • Red Hat Ceph Storage 4.2 OSD
  • Red Hat Ceph Storage 4.2 Tools
  • ceph-2:14.2.11-147.el7cp.src as a component of Red Hat Ceph Storage 4.2 MON
  • ceph-2:14.2.11-147.el7cp.src as a component of Red Hat Ceph Storage 4.2 OSD
  • ceph-2:14.2.11-147.el7cp.src as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-2:14.2.11-147.el8cp.src as a component of Red Hat Ceph Storage 4.2 MON
  • ceph-2:14.2.11-147.el8cp.src as a component of Red Hat Ceph Storage 4.2 OSD
  • ceph-2:14.2.11-147.el8cp.src as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-ansible-0:4.0.49.2-1.el7cp.noarch as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-ansible-0:4.0.49.2-1.el7cp.src as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-ansible-0:4.0.49.2-1.el8cp.noarch as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-ansible-0:4.0.49.2-1.el8cp.src as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-base-2:14.2.11-147.el7cp.ppc64le as a component of Red Hat Ceph Storage 4.2 MON
  • ceph-base-2:14.2.11-147.el7cp.ppc64le as a component of Red Hat Ceph Storage 4.2 OSD
  • ceph-base-2:14.2.11-147.el7cp.ppc64le as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-base-2:14.2.11-147.el7cp.x86_64 as a component of Red Hat Ceph Storage 4.2 MON
  • ceph-base-2:14.2.11-147.el7cp.x86_64 as a component of Red Hat Ceph Storage 4.2 OSD
  • ceph-base-2:14.2.11-147.el7cp.x86_64 as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-base-2:14.2.11-147.el8cp.ppc64le as a component of Red Hat Ceph Storage 4.2 MON
  • ceph-base-2:14.2.11-147.el8cp.ppc64le as a component of Red Hat Ceph Storage 4.2 OSD
  • ceph-base-2:14.2.11-147.el8cp.ppc64le as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-base-2:14.2.11-147.el8cp.s390x as a component of Red Hat Ceph Storage 4.2 MON
  • ceph-base-2:14.2.11-147.el8cp.s390x as a component of Red Hat Ceph Storage 4.2 OSD
  • ceph-base-2:14.2.11-147.el8cp.s390x as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-base-2:14.2.11-147.el8cp.x86_64 as a component of Red Hat Ceph Storage 4.2 MON
  • ceph-base-2:14.2.11-147.el8cp.x86_64 as a component of Red Hat Ceph Storage 4.2 OSD
  • ceph-base-2:14.2.11-147.el8cp.x86_64 as a component of Red Hat Ceph Storage 4.2 Tools
  • ceph-base-debuginfo-2:14.2.11-147.el8cp.ppc64le as a component of Red Hat Ceph Storage 4.2 MON
  • ceph-base-debuginfo-2:14.2.11-147.el8cp.ppc64le as a component of Red Hat Ceph Storage 4.2 OSD
  • +170 more not shown

✅ Remediation

For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: As this feature can be guarded behind an authentication and firewall rules, limit access with firewall rules and enforcing strong password hygiene. This may not be a suitable option if many uncontrolled hosts mount the networked iSCSI device.

🔗 References (68)