CVE-2016-7031

Published October 3rd, 2016

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.

ceph/ceph

Ceph is a distributed object, block, and file storage platform

GitHub

16.7K