Not rated
CVE-2020-25678 A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text
Description
A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by searching the mgr logs for grafana and dashboard, with passwords visible.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ceph | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- tracker.ceph.com tracker.ceph.com
- FEDORA-2021-93ff9e9103 lists.fedoraproject.org
- GLSA-202105-39 security.gentoo.org
- lists.debian.org lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of ceph
The 10 CVEs of ceph →
CVE-2022-3854
A flaw was found in Ceph, relating to the URL processing on RGW backends
6.5
Medium
CVE-2022-3650
A privilege escalation flaw was found in Ceph
Not rated
CVE-2021-3979
A key length flaw was found in Red Hat Ceph Storage
Not rated
CVE-2022-0670
A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any…
Not rated