Ceph is a widely deployed distributed storage platform that provides object, block, and file storage across many enterprise and cloud environments, with vulnerability exposure spanning the core storage engine and its deployment automation tooling. The recurring weakness classes—including exposure of sensitive information, improper authentication, cleartext storage, and access-control gaps—reflect the authentication and credential-management demands of a distributed system where storage nodes must communicate securely and clients must be properly isolated. Defenders should prioritize inventory and network segmentation of Ceph clusters and monitor the deployment tooling for configuration errors; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Ceph over time
Signals from CVEs in this vendor scope (12 CVEs).
12 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-10222HIGH A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HT | Nov 8, 2019 | 7.5 | 27 | NO | NO |
CVE-2019-3821HIGH A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled. An unauthenticated attacker could create multiple connections to ceph RADO | Mar 27, 2019 | 7.5 | 25 | NO | NO |
CVE-2018-10861HIGH A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images | Jul 10, 2018 | 8.1 | 25 | NO | NO |
CVE-2020-1716HIGH A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. Any authenticated atta | May 28, 2021 | 8.8 | 22 | NO | NO |
CVE-2018-1129MEDIUM A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message p | Jul 10, 2018 | 6.5 | 22 | NO | NO |
CVE-2017-12155MEDIUM A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access | Dec 12, 2017 | 6.3 | 22 | NO | NO |
CVE-2020-25677MEDIUM A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensiti | Dec 8, 2020 | 5.5 | 19 | NO | NO |
CVE-2016-7031HIGH The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL. | Oct 3, 2016 | 7.5 | 19 | NO | NO |
CVE-2020-1700MEDIUM A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can abuse this flaw by making multiple disconnect attempts result | Feb 7, 2020 | 6.5 | 18 | NO | NO |
CVE-2017-7519MEDIUM In Ceph, a format string flaw was found in the way libradosstriper parses input from user. A user could crash an application or service using the libradosstriper library. | Jul 27, 2018 | 4.4 | 18 | NO | NO |
Signals from CVEs in this vendor scope (12 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Ceph.
Media articles that mention a CVE ID that affects a product developed by Ceph — matched by CVE ID, not by vendor name.