CVE-2020-27781

CVE-2020-27781 describes a privilege escalation vulnerability in OpenStack Manila when using Native CephFS. An attacker can manipulate and steal user credentials, including those of "admin" users, by requesting share access to an arbitrary cephx user. This flaw affects Ceph versions prior to 14.2.16, 15.x prior to 15.2.8, and 16.x prior to 16.2.0, impacting various Fedora and Red Hat Ceph/OpenStack products. The vulnerability has a CVSS score of 7.1 (HIGH), indicating a local attack vector with low complexity, requiring low privileges and no user interaction, leading to high confidentiality and integrity impacts. The EPSS score is very low, suggesting a low probability of exploitation in the wild. Currently, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.