General

Profile

Rahul Aggarwal

Issues

Activity

11/11/2016

09:08 PM Ceph Revision a7b182e0 (ceph): 13207: Rados Gateway: Anonymous user is able to read bucket with authen...
Signed-off-by: root <rahul.1aggarwal@gmail.com>
(cherry picked from commit 99ba6610a8f437604cadf68cbe9969def893e870)

11/19/2015

07:22 PM Ceph Revision 99ba6610 (ceph): 13207: Rados Gateway: Anonymous user is able to read bucket with authen...
Signed-off-by: root <rahul.1aggarwal@gmail.com>

09/23/2015

10:41 AM rgw Bug #13207: CVE-2016-7031 rgw: Anonymous user is able to read bucket with authenticated read ACL
attatching test code
10:39 AM rgw Bug #13207 (Resolved): CVE-2016-7031 rgw: Anonymous user is able to read bucket with authenticate...
When "authenticated-read" ACL is applied on a bucket; anonymous user is also able to read (eg. list) the bucket. But ...

Also available in: Atom