CVE-2018-1129

Name of the Vulnerable Software and Affected Versions Ceph branches master, mimic, luminous, and jewel are believed to be vulnerable.

Description A flaw was found in the way signature calculation was handled by the cephx authentication protocol. An attacker with access to the Ceph cluster network who can alter the message payload can bypass signature checks done by the cephx protocol.

Recommendations For Ceph branches master, mimic, luminous, and jewel, at the moment, there is no information about a newer version that contains a fix for this vulnerability.