CVSS 3.0
7.5 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2016-7031
High (7.5). EPSS 1.8% chance of exploitation in the next 30 days.
The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.
Severity
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-200, CWE-254
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ceph_project:ceph
- redhat:ceph_storage