CVE:CVE-2020-27781
CNNVD:CNNVD-202012-1233
OpenStack是美国国家航空航天局（National Aeronautics and Space Administration）和美国Rackspace公司合作研发的一个云平台管理项目。
OpenStack Manila 存在安全漏洞，该漏洞源于DescriptionUser凭据可能会被OpenStack Manila的本地CephFS消费者操纵和窃取，从而导致潜在的特权升级。
solution:Upgrade redhat ceph to a higher version than 14.2.16,15.2.8,16.2.0,and avoid the version (,14.2.16),[15.0.0,15.2.8),[16.0.0,16.2.0); Upgrade redhat ceph_storage to a higher version than 2.0,3.0,4.0,and avoid the version 2.0,3.0,4.0; Upgrade redhat openshift_container_platform to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat openstack_platform to a higher version than 13.0,and avoid the version 13.0; Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33