CVE-2018-16889 is a vulnerability in Red Hat Ceph
Published on January 28, 2019
Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption key information in log files via plaintext. Versions up to v13.2.4 are vulnerable.
Weakness Type
Insertion of Sensitive Information into Log File
Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.
Products Associated with CVE-2018-16889
Want to know whenever a new CVE is published for Red Hat Ceph? stack.watch will email you.
Affected Versions
The Ceph Project ceph Version up to v13.2.4 is affected by CVE-2018-16889Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.