CVE-2015-3010

Name of the Vulnerable Software and Affected Versions ceph-deploy versions prior to 1.5.23

Description The issue allows local users to obtain sensitive information by reading the ceph/ceph.client.admin.keyring file due to weak permissions (644) used by ceph-deploy.

Recommendations For versions prior to 1.5.23, update to version 1.5.23 or later to resolve the issue. As a temporary workaround, consider changing the permissions of the ceph/ceph.client.admin.keyring file to restrict access until a patch is applied.