Launchpad.net

CVE 2016-7031

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.

See the CVE page on Mitre.org for more details.