CVE-2018-16889mediumCWE-532

CVE-2018-16889: medium-severity vulnerability in The Ceph Project ceph

Published · Updated

Follow this CVE+ Monitor ceph+ Monitor ceph

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.5epss 0.5%
Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption key information in log files via plaintext. Versions up to v13.2.4 are vulnerable.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
The Ceph Project · ceph
Related CVEs — The Ceph Project ceph

In the same product, most dangerous first.

CVE-2019-10222HIGHCVE-2019-10222EPSS 4.5%CVE-2020-1699HIGHCVE-2020-1699EPSS 2.1%CVE-2020-1759MEDIUMCVE-2020-1759EPSS 1.6%