{"id":"CVE-2017-12155","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-12155","generatedAt":"2026-10-29T01:51:41.726Z","title":"A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.","description":"A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.","published":"2017-12-12T20:29:00.000Z","lastModified":"2026-06-17T01:02:47.000Z","status":"Modified","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"3.0","score":6.3,"severity":"MEDIUM","vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N"},"cwe":["CWE-306"],"affected":["ceph/ceph"],"epss":{"score":0.00287,"percentile":0.21113,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:0602","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1593","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1627","source":"secalert@redhat.com"},{"url":"https://bugs.launchpad.net/tripleo/+bug/1720787","tags":["Issue Tracking","Patch"],"source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1489360","tags":["Issue Tracking","Mitigation"],"source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:0602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:1593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:1627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/tripleo/+bug/1720787","tags":["Issue Tracking","Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1489360","tags":["Issue Tracking","Mitigation"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-12155","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}