CVE-2025-30156 | CVSS: 8.9 | 严重级别: HIGH
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message authentication, allowing an attacker to forge credentials and gain cluster-wide access. Because the ciphertext is malleable and the monitor will encrypt attacker-chosen entity names, an attacker holding one low-privilege key and able to observe CephX traffic can use the monitor as an encryption oracle and spl
参考链接:
• https://github.com/ceph/ceph/commit/2ba086255de09c8b95177717cc7e9dd4377e2f0f
• https://github.com/ceph/ceph/commit/3078188a7bdd89e2975280f2a906c71c2f6effd6
• https://github.com/ceph/ceph/security/advisories/GHSA-7q3q-3975-qw3q
📌 数据来源: NVD 官方