Skip to content
Fencer Vulns
medium 5.5

CVE-2020-25677 json

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions.

published 2020-12-08 5 y ago modified 2026-06-17 4 mo ago also EUVD-2020-18339

cvss
5.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 11%
public exploits
0
none known

Summary

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.

Patch / fix

  • ceph ceph storage 4 2:14.2.11-95.el7cp
  • ceph ceph storage 4 2:14.2.11-95.el8cp
  • librbd1 ceph storage 4 2:14.2.11-95.el7cp
  • librbd1 ceph storage 4 2:14.2.11-95.el8cp
  • librgw2 ceph storage 4 2:14.2.11-95.el7cp
  • librgw2 ceph storage 4 2:14.2.11-95.el8cp
  • rbd-nbd ceph storage 4 2:14.2.11-95.el7cp
  • rbd-nbd ceph storage 4 2:14.2.11-95.el8cp

red hat advisories RHSA-2021:0081

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2020-25677 updated cvss 5.5

ceph-ansible: insecure ownership on /etc/ceph/iscsi-gateway.conf configuration file

  • Red Hat Ceph Storage 2 ceph-ansible Red Hat Ceph Storage 3 ceph-ansible
    affected: no fix planned “Out of support scope”
  • Red Hat OpenStack Platform 13 (Queens) ceph-ansible
    affected: no fix planned “Will not fix”
  • Red Hat Ceph Storage 4.2 Tools ceph-ansible 4.0.41-1.el7cp, ceph-ansible 4.0.41-1.el8cp
    fixed: vendor fix RHSA-2021:0081
  • Red Hat OpenShift Container Storage 4.6 on RHEL-8 ocs4/ocs-operator-bundle 4.6.2-1, ocs4/mcg-core-rhel8 5.6.0-42.6a01c5fc0.5.6, ocs4/mcg-rhel8-operator 5.6.0-41.2279a46.5.6, ocs4/cephcsi-rhel8 4.6-54.49cf5efdd.release_4.6, ocs4/ocs-rhel8-operator 4.6-78.3b7455e4.release_4.6, ocs4/ocs-must-gather-rhel8 4.6-78.3b7455e4.release_4.6, +1 more
    fixed: vendor fix RHBA-2021:0305
  • Red Hat Ceph Storage 4.2 MON ceph 14.2.11-95.el7cp, ceph 14.2.11-95.el8cp, librbd1 14.2.11-95.el7cp, librbd1 14.2.11-95.el8cp, librgw2 14.2.11-95.el7cp, librgw2 14.2.11-95.el8cp, +54 more Red Hat Ceph Storage 4.2 OSD ceph 14.2.11-95.el7cp, ceph 14.2.11-95.el8cp, librbd1 14.2.11-95.el7cp, librbd1 14.2.11-95.el8cp, librgw2 14.2.11-95.el7cp, librgw2 14.2.11-95.el8cp, +50 more Red Hat Ceph Storage 4.2 Tools ceph 14.2.11-95.el7cp, ceph 14.2.11-95.el8cp, libntirpc 3.3-0.1.el7cp, libntirpc 3.3-0.1.el8cp, librbd1 14.2.11-95.el7cp, librbd1 14.2.11-95.el8cp, +71 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

0.21% chance of exploitation in the next 30 days, higher than 11% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD 2.0 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • n/a ceph-ansible

Classification

Weakness
  • CWE-312 Cleartext Storage of Sensitive Information

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.