CVE-2018-16889: redhat ceph
Vulnerability summary
CVE-2018-16889 is a high (CVSS 7.5) vulnerability in redhat ceph. EPSS estimates a 0.54% chance of exploitation in the next 30 days, higher than 45.2% of scored vulnerabilities. 1 public exploit is recorded.
Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 4 · Related 3Timeline
- 28-01-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption key information in log files via plaintext. Versions up to v13.2.4 are vulnerable.
CVSS metrics
5 scores · 4 sources · 2 versions- CVE.orgCNA5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NDiffers
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NDiffers
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS trend
Probability
0.54%
Chance of exploitation in the next 30 days
Percentile
45%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.54% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (bugzilla.redhat.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-532Insertion of Sensitive Information into Log FileThe product writes sensitive information to a log file.
- CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
- CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
- CWE-312Cleartext Storage of Sensitive InformationThe product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Affected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Suse5 products
- ceph&distro=SUSE Enterprise Storage 5< 12.2.12+git.1568024032.02236657ca-2.39.1
- ceph&distro=SUSE Linux Enterprise Desktop 12 SP4< 12.2.12+git.1568024032.02236657ca-2.39.1
- ceph&distro=SUSE Linux Enterprise Server 12 SP4< 12.2.12+git.1568024032.02236657ca-2.39.1
- ceph&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4< 12.2.12+git.1568024032.02236657ca-2.39.1
- ceph&distro=SUSE Linux Enterprise Software Development Kit 12 SP4< 12.2.12+git.1568024032.02236657ca-2.39.1
Debian1 product
- ceph< 12.2.11+dfsg1-1
Redhat1 product
- ceph≤ 13.2.4
The ceph project1 product
- ceph≤ v13.2.4
Ubuntu1 product
- ceph< 10.2.11-0ubuntu0.16.04.2 | < 12.2.11-0ubuntu0.18.04.1
5 vendors · 9 products
References
13 links- bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16889X Refsource CONFIRMExploitIssue TrackingPatchThird Party Advisory
