CVSS 3.1
5.7 mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2018-14662
Medium (5.7). EPSS 0.5% chance of exploitation in the next 30 days.
It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-285, CWE-732
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- debian:debian_linux
- opensuse:leap
- redhat:ceph
- redhat:ceph_storage
- redhat:enterprise_linux_server