CVE-2016-7031: Ceph Project Ceph

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.

Affected products

• Ceph Project Ceph: up to and including 10.0.0
• Red Hat Ceph Storage: up to and including 1.3.2

Published 2016-10-03. Last modified 2026-06-17.