CVE-2020-1716

CVE-2020-1716 describes a critical vulnerability in the ceph-ansible playbook, where hardcoded default passwords for Ceph services could be exploited. This flaw affects versions of ceph-ansible prior to 6.0.0alpha1. With a CVSS score of 8.8 (HIGH), an authenticated attacker can easily brute-force these default credentials, gaining administrator access to Ceph clusters via the dashboard. This allows for full control, including read, write, and delete operations on clusters, as well as modification of configurations. There is currently no evidence of active exploitation, nor are there public exploit modules or significant community discussion surrounding this CVE.