Debian/ceph: high 7.5
Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption key information in log files via plaintext. Versions up to v13.2.4 are vulnerabl
Action: Upgrade ceph to 12.2.11+dfsg1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.2.11+dfsg1-1 | - |
Fixed versions
| 12.2.11+dfsg1-1 |
Sources
- osv: DEBIAN-CVE-2018-16889#Debian:14/ceph
- https://security-tracker.debian.org/tracker/CVE-2018-16889
published · modified · JSON