CVE-2022-0670

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

• CWE-863

• https://ceph.io/en/news/blog/2022/v17-2-2-quincy-released/Release Notes, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5O3XMDFZWA2FWU6GAYOVSFJPOUTXN42N/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TIRTTRG5O4YP2TNGDCDOHIHP2DM3DFBT/
• https://ceph.io/en/news/blog/2022/v17-2-2-quincy-released/Release Notes, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5O3XMDFZWA2FWU6GAYOVSFJPOUTXN42N/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TIRTTRG5O4YP2TNGDCDOHIHP2DM3DFBT/

Published

Jul 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0664Use of Hard-coded Cryptographic Key in Go github.com/gravitl…9.8
• CVE-2022-0665Path Traversal in GitHub repository pimcore/pimcore prior to…6.5
• CVE-2022-0666CRLF Injection leads to Stack Trace Exposure due to lack of …7.5
• CVE-2022-0667When the vulnerability is triggered the BIND process will ex…7.5
• CVE-2022-0668JFrog Artifactory prior to 7.37.13 is vulnerable to Authenti…9.8
• CVE-2022-0669A flaw was found in dpdk. This flaw allows a malicious vhost…6.5
• CVE-2022-0671A flaw was found in vscode-xml in versions prior to 0.19.0. …9.1
• CVE-2022-0672A flaw was found in LemMinX in versions prior to 0.19.0. Ins…5.5
• CVE-2022-0673A flaw was found in LemMinX in versions prior to 0.19.0. Cac…6.5
• CVE-2022-0674The Kunze Law WordPress plugin before 2.1 does not escape it…4.8
• CVE-2022-0675In certain situations it is possible for an unmanaged rule t…9.8
• CVE-2022-0676Heap-based Buffer Overflow in GitHub repository radareorg/ra…7.8