VulnerabilityDeferred

CVE-2024-48916

The vulnerability is most likely in the RadosGW OIDC provider.

HIGH 8.1EPSS 0.19%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.19%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Ceph is a distributed object, block, and file storage platform. In versions 19.2.3 and below, it is possible to send an JWT that has "none" as JWT alg. And by doing so the JWT signature is not checked. The vulnerability is most likely in the RadosGW OIDC provider. As of time of publication, a known patched version has yet to be published.

CVSS 3.1: 8.1 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS: 0.19% probability · 9th percentile
CISA KEV: Not listed
Weakness: CWE-345
Source: security-advisories@github.com

References

https://github.com/ceph/ceph/security/advisories/GHSA-5g9m-mmp6-93mq

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.