CVE-2018-10861

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete and corrupt snapshot images

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Use mon_allow_pool_delete = false in ceph.conf to disable deletion of pools

~]$ for p in rados lspools do ceph osd pool set $p nodelete true done

caveat: This mitigation does not protect against attacker from corrupting snapshot images