Sploitus

CVE-2018-16889

No indexed exploits for CVE-2018-16889 yet

Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption key information in log files via plaintext. Versions up to v13.2.4 are vulnerable.

Affected products
Alt Linux, Ceph, Suse, Ubuntu
Redhat Ceph
≤ 13.2.4
Fix
Available
CVSS 3.0
7.5 HIGH
EPSS
0.5% (42th percentile)
Weakness
CWE-312, CWE-532, CWE-20, CWE-200
NVD status
Modified
Published
2019-01-28
CVE-2018-16889 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2018-16889 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2018-16889 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.