CVE:CVE-2020-1759
CNNVD:CNNVD-202004-260
Red Hat Ceph Storage和Red Hat OpenShift都是美国红帽（Red Hat）公司的产品。Red Hat Ceph Storage是一套可扩展的、开放性的软件定义存储平台。Red Hat OpenShift是一款平台即服务（PaaS）云计算平台，它支持构建、测试、部署和运行应用程序。
Red Hat Ceph Storage 4.0版本、OpenStack 15.0版本和Openshift 4.2版本中的messenger v2协议的安全模式存在安全特征问题漏洞。攻击者可利用该漏洞伪造auth标签并可能操纵数据。
solution:Upgrade redhat ceph_storage to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat openshift to a higher version than 4.2,and avoid the version 4.2; Upgrade redhat openstack to a higher version than 15,and avoid the version 15; Upgrade linuxfoundation ceph to a higher version than 14.2.21,and avoid the version (,14.2.21); Upgrade fedoraproject fedora to a higher version than 31,and avoid the version 31