A flaw was discovered in ceph. Assertion in rgw_iam_policy.cc can be reached by user input and fail through data passed in from a rest call causing it to crash.
Created ceph tracking bugs for this issue:
Affects: epel-6 [bug 1515896]
Affects: fedora-all [bug 1515895]
Red Hat Ceph Storage 1.3 and Red Hat Ceph Storage 2 are not affected by this flaw as bucket policy is not supported in ceph version shipped with these products.