Approved changes feed: RSS · Atom

cpe:2.3:a:linuxfoundation:ceph:14.2.6:*:*:*:*:*:*:*

part: a version: 14.2.6 update: *

VendorLinuxfoundation (4b459c90-8cdb-5268-beb4-b69b5fe74234)
ProductCeph (6f7815c4-cbff-55d6-901d-fa839374feb3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ceph purl2cpe 2026-06-01 10:13:22.919693
pkg:deb/ubuntu/ceph purl2cpe 2026-06-01 10:13:22.919694
pkg:github/ceph/ceph purl2cpe 2026-06-01 10:13:22.919695
pkg:rpm/fedora/ceph purl2cpe 2026-06-01 10:13:22.919697
pkg:rpm/opensuse/ceph purl2cpe 2026-06-01 10:13:22.919698

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-1699 vulnerable 2026-06-08 05:21:02.819073 Details available
HIGH (7.5)
A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions 14.2.7 and 15.1.0. An unauthenticated attacker could use this flaw to cause information disclosure on the host machine running the Ceph dashboard.
Published: 2020-04-21T15:27:07.000Z
Updated: 2024-08-04T06:46:30.457Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.