Vulnerabilities > CVE-2022-3854 - Unspecified vulnerability in Redhat Ceph Storage 3.0/4.0/5.0

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
redhat

Summary

A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service.

Vulnerable Configurations

Part Description Count
Application
Redhat
3