CVE-2018-14662

—

CVSS 3.1

5.7 medium

EPSS

<1%p38

Published

Jan 15, 2019 (Jan 15, 2019)

Modified

Jun 17, 2026

Description

It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption.

Vendors: redhat debian opensuse canonical
Products: ceph, debian linux, leap, ceph storage, enterprise linux server, ubuntu linux
Weakness: CWE-285, CWE-732
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.