Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-ssk3-kfn8-vuhy
Summaryceph: debug logging for v4 auth does not sanitize encryption keys
Aliases
0
alias CVE-2018-16889
Fixed_packages
0
url pkg:deb/debian/ceph@12.2.11%2Bdfsg1-1?distro=trixie
purl pkg:deb/debian/ceph@12.2.11%2Bdfsg1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@12.2.11%252Bdfsg1-1%3Fdistro=trixie
1
url pkg:deb/debian/ceph@12.2.11%2Bdfsg1-2.1
purl pkg:deb/debian/ceph@12.2.11%2Bdfsg1-2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1fhp-86sm-bqe5
2
vulnerability VCID-1yz5-m9s7-nqdm
3
vulnerability VCID-36gd-352p-n7b7
4
vulnerability VCID-3pwt-4j1y-dbg6
5
vulnerability VCID-47cr-h639-tqd4
6
vulnerability VCID-4mk7-e67u-zkgy
7
vulnerability VCID-54nw-yq6d-2ueu
8
vulnerability VCID-5bgn-2pbq-6yd1
9
vulnerability VCID-6kbn-psnc-q3cy
10
vulnerability VCID-7k2s-fmzx-a3d8
11
vulnerability VCID-9e77-3unf-r3hu
12
vulnerability VCID-a4u3-63ez-gfbc
13
vulnerability VCID-gjne-rqt9-jqc5
14
vulnerability VCID-kxvn-yjm8-3ygt
15
vulnerability VCID-m5wq-1w2k-9khk
16
vulnerability VCID-nczx-qfyh-xubz
17
vulnerability VCID-pp2v-1dp5-4bbd
18
vulnerability VCID-qkp7-s947-ufcu
19
vulnerability VCID-r1ah-c6z7-vyen
20
vulnerability VCID-rukb-cwpx-q3hy
21
vulnerability VCID-zbwp-sfx4-xke7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@12.2.11%252Bdfsg1-2.1
2
url pkg:deb/debian/ceph@14.2.21-1?distro=trixie
purl pkg:deb/debian/ceph@14.2.21-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@14.2.21-1%3Fdistro=trixie
3
url pkg:deb/debian/ceph@16.2.15%2Bds-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ceph@16.2.15%2Bds-0%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1yz5-m9s7-nqdm
2
vulnerability VCID-r1ah-c6z7-vyen
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@16.2.15%252Bds-0%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/ceph@18.2.7%2Bds-1?distro=trixie
purl pkg:deb/debian/ceph@18.2.7%2Bds-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1yz5-m9s7-nqdm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@18.2.7%252Bds-1%3Fdistro=trixie
5
url pkg:deb/debian/ceph@18.2.8%2Bds-1?distro=trixie
purl pkg:deb/debian/ceph@18.2.8%2Bds-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@18.2.8%252Bds-1%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/ceph@0.80.7-1~bpo70%2B1
purl pkg:deb/debian/ceph@0.80.7-1~bpo70%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1fhp-86sm-bqe5
2
vulnerability VCID-1yz5-m9s7-nqdm
3
vulnerability VCID-36gd-352p-n7b7
4
vulnerability VCID-3pwt-4j1y-dbg6
5
vulnerability VCID-47cr-h639-tqd4
6
vulnerability VCID-4mk7-e67u-zkgy
7
vulnerability VCID-54nw-yq6d-2ueu
8
vulnerability VCID-5bgn-2pbq-6yd1
9
vulnerability VCID-6kbn-psnc-q3cy
10
vulnerability VCID-7k2s-fmzx-a3d8
11
vulnerability VCID-9e77-3unf-r3hu
12
vulnerability VCID-a4u3-63ez-gfbc
13
vulnerability VCID-axaa-8h31-j3gd
14
vulnerability VCID-bdcb-c7nj-j7gw
15
vulnerability VCID-bysx-t7fz-5kdk
16
vulnerability VCID-cm58-jgsb-7yaf
17
vulnerability VCID-d8ft-cst1-5yh5
18
vulnerability VCID-fy1p-qh8k-m7b8
19
vulnerability VCID-gj55-s7r1-f3b4
20
vulnerability VCID-gjne-rqt9-jqc5
21
vulnerability VCID-hqp5-p9fs-t3dk
22
vulnerability VCID-kxvn-yjm8-3ygt
23
vulnerability VCID-m5wq-1w2k-9khk
24
vulnerability VCID-nczx-qfyh-xubz
25
vulnerability VCID-pp2v-1dp5-4bbd
26
vulnerability VCID-qkp7-s947-ufcu
27
vulnerability VCID-qr8p-ec3h-37at
28
vulnerability VCID-r1ah-c6z7-vyen
29
vulnerability VCID-rukb-cwpx-q3hy
30
vulnerability VCID-ss2f-8hxs-myb1
31
vulnerability VCID-ssk3-kfn8-vuhy
32
vulnerability VCID-xsvh-emr7-r7as
33
vulnerability VCID-yr1z-udw9-mfha
34
vulnerability VCID-zbwp-sfx4-xke7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@0.80.7-1~bpo70%252B1
1
url pkg:deb/debian/ceph@0.80.7-2
purl pkg:deb/debian/ceph@0.80.7-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1fhp-86sm-bqe5
2
vulnerability VCID-1yz5-m9s7-nqdm
3
vulnerability VCID-36gd-352p-n7b7
4
vulnerability VCID-3pwt-4j1y-dbg6
5
vulnerability VCID-47cr-h639-tqd4
6
vulnerability VCID-4mk7-e67u-zkgy
7
vulnerability VCID-54nw-yq6d-2ueu
8
vulnerability VCID-5bgn-2pbq-6yd1
9
vulnerability VCID-6kbn-psnc-q3cy
10
vulnerability VCID-7k2s-fmzx-a3d8
11
vulnerability VCID-9e77-3unf-r3hu
12
vulnerability VCID-a4u3-63ez-gfbc
13
vulnerability VCID-axaa-8h31-j3gd
14
vulnerability VCID-bdcb-c7nj-j7gw
15
vulnerability VCID-bysx-t7fz-5kdk
16
vulnerability VCID-cm58-jgsb-7yaf
17
vulnerability VCID-d8ft-cst1-5yh5
18
vulnerability VCID-fy1p-qh8k-m7b8
19
vulnerability VCID-gj55-s7r1-f3b4
20
vulnerability VCID-gjne-rqt9-jqc5
21
vulnerability VCID-hqp5-p9fs-t3dk
22
vulnerability VCID-kxvn-yjm8-3ygt
23
vulnerability VCID-m5wq-1w2k-9khk
24
vulnerability VCID-nczx-qfyh-xubz
25
vulnerability VCID-pp2v-1dp5-4bbd
26
vulnerability VCID-qkp7-s947-ufcu
27
vulnerability VCID-qr8p-ec3h-37at
28
vulnerability VCID-r1ah-c6z7-vyen
29
vulnerability VCID-rukb-cwpx-q3hy
30
vulnerability VCID-ss2f-8hxs-myb1
31
vulnerability VCID-ssk3-kfn8-vuhy
32
vulnerability VCID-xsvh-emr7-r7as
33
vulnerability VCID-yr1z-udw9-mfha
34
vulnerability VCID-zbwp-sfx4-xke7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@0.80.7-2
2
url pkg:deb/debian/ceph@0.80.7-2%2Bdeb8u2
purl pkg:deb/debian/ceph@0.80.7-2%2Bdeb8u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1fhp-86sm-bqe5
2
vulnerability VCID-1yz5-m9s7-nqdm
3
vulnerability VCID-36gd-352p-n7b7
4
vulnerability VCID-3pwt-4j1y-dbg6
5
vulnerability VCID-47cr-h639-tqd4
6
vulnerability VCID-4mk7-e67u-zkgy
7
vulnerability VCID-54nw-yq6d-2ueu
8
vulnerability VCID-5bgn-2pbq-6yd1
9
vulnerability VCID-6kbn-psnc-q3cy
10
vulnerability VCID-7k2s-fmzx-a3d8
11
vulnerability VCID-9e77-3unf-r3hu
12
vulnerability VCID-a4u3-63ez-gfbc
13
vulnerability VCID-axaa-8h31-j3gd
14
vulnerability VCID-bdcb-c7nj-j7gw
15
vulnerability VCID-bysx-t7fz-5kdk
16
vulnerability VCID-cm58-jgsb-7yaf
17
vulnerability VCID-d8ft-cst1-5yh5
18
vulnerability VCID-fy1p-qh8k-m7b8
19
vulnerability VCID-gj55-s7r1-f3b4
20
vulnerability VCID-gjne-rqt9-jqc5
21
vulnerability VCID-hqp5-p9fs-t3dk
22
vulnerability VCID-kxvn-yjm8-3ygt
23
vulnerability VCID-m5wq-1w2k-9khk
24
vulnerability VCID-nczx-qfyh-xubz
25
vulnerability VCID-pp2v-1dp5-4bbd
26
vulnerability VCID-qkp7-s947-ufcu
27
vulnerability VCID-qr8p-ec3h-37at
28
vulnerability VCID-r1ah-c6z7-vyen
29
vulnerability VCID-rukb-cwpx-q3hy
30
vulnerability VCID-ss2f-8hxs-myb1
31
vulnerability VCID-ssk3-kfn8-vuhy
32
vulnerability VCID-xsvh-emr7-r7as
33
vulnerability VCID-yr1z-udw9-mfha
34
vulnerability VCID-zbwp-sfx4-xke7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@0.80.7-2%252Bdeb8u2
3
url pkg:deb/debian/ceph@0.80.10-2~bpo8%2B1
purl pkg:deb/debian/ceph@0.80.10-2~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1fhp-86sm-bqe5
2
vulnerability VCID-1yz5-m9s7-nqdm
3
vulnerability VCID-36gd-352p-n7b7
4
vulnerability VCID-3pwt-4j1y-dbg6
5
vulnerability VCID-47cr-h639-tqd4
6
vulnerability VCID-4mk7-e67u-zkgy
7
vulnerability VCID-54nw-yq6d-2ueu
8
vulnerability VCID-5bgn-2pbq-6yd1
9
vulnerability VCID-6kbn-psnc-q3cy
10
vulnerability VCID-7k2s-fmzx-a3d8
11
vulnerability VCID-9e77-3unf-r3hu
12
vulnerability VCID-a4u3-63ez-gfbc
13
vulnerability VCID-axaa-8h31-j3gd
14
vulnerability VCID-bdcb-c7nj-j7gw
15
vulnerability VCID-cm58-jgsb-7yaf
16
vulnerability VCID-d8ft-cst1-5yh5
17
vulnerability VCID-fy1p-qh8k-m7b8
18
vulnerability VCID-gj55-s7r1-f3b4
19
vulnerability VCID-gjne-rqt9-jqc5
20
vulnerability VCID-hqp5-p9fs-t3dk
21
vulnerability VCID-kxvn-yjm8-3ygt
22
vulnerability VCID-m5wq-1w2k-9khk
23
vulnerability VCID-nczx-qfyh-xubz
24
vulnerability VCID-pp2v-1dp5-4bbd
25
vulnerability VCID-qkp7-s947-ufcu
26
vulnerability VCID-qr8p-ec3h-37at
27
vulnerability VCID-r1ah-c6z7-vyen
28
vulnerability VCID-rukb-cwpx-q3hy
29
vulnerability VCID-ss2f-8hxs-myb1
30
vulnerability VCID-ssk3-kfn8-vuhy
31
vulnerability VCID-xsvh-emr7-r7as
32
vulnerability VCID-yr1z-udw9-mfha
33
vulnerability VCID-zbwp-sfx4-xke7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@0.80.10-2~bpo8%252B1
4
url pkg:deb/debian/ceph@10.2.5-6~bpo8%2B1
purl pkg:deb/debian/ceph@10.2.5-6~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1fhp-86sm-bqe5
2
vulnerability VCID-1yz5-m9s7-nqdm
3
vulnerability VCID-36gd-352p-n7b7
4
vulnerability VCID-3pwt-4j1y-dbg6
5
vulnerability VCID-47cr-h639-tqd4
6
vulnerability VCID-4mk7-e67u-zkgy
7
vulnerability VCID-54nw-yq6d-2ueu
8
vulnerability VCID-5bgn-2pbq-6yd1
9
vulnerability VCID-6kbn-psnc-q3cy
10
vulnerability VCID-7k2s-fmzx-a3d8
11
vulnerability VCID-9e77-3unf-r3hu
12
vulnerability VCID-a4u3-63ez-gfbc
13
vulnerability VCID-axaa-8h31-j3gd
14
vulnerability VCID-bdcb-c7nj-j7gw
15
vulnerability VCID-d8ft-cst1-5yh5
16
vulnerability VCID-fy1p-qh8k-m7b8
17
vulnerability VCID-gjne-rqt9-jqc5
18
vulnerability VCID-hqp5-p9fs-t3dk
19
vulnerability VCID-kxvn-yjm8-3ygt
20
vulnerability VCID-m5wq-1w2k-9khk
21
vulnerability VCID-nczx-qfyh-xubz
22
vulnerability VCID-pp2v-1dp5-4bbd
23
vulnerability VCID-qkp7-s947-ufcu
24
vulnerability VCID-r1ah-c6z7-vyen
25
vulnerability VCID-rukb-cwpx-q3hy
26
vulnerability VCID-ssk3-kfn8-vuhy
27
vulnerability VCID-xsvh-emr7-r7as
28
vulnerability VCID-yr1z-udw9-mfha
29
vulnerability VCID-zbwp-sfx4-xke7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@10.2.5-6~bpo8%252B1
5
url pkg:deb/debian/ceph@10.2.11-2
purl pkg:deb/debian/ceph@10.2.11-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18bk-met9-qfc9
1
vulnerability VCID-1fhp-86sm-bqe5
2
vulnerability VCID-1yz5-m9s7-nqdm
3
vulnerability VCID-36gd-352p-n7b7
4
vulnerability VCID-3pwt-4j1y-dbg6
5
vulnerability VCID-47cr-h639-tqd4
6
vulnerability VCID-4mk7-e67u-zkgy
7
vulnerability VCID-54nw-yq6d-2ueu
8
vulnerability VCID-5bgn-2pbq-6yd1
9
vulnerability VCID-6kbn-psnc-q3cy
10
vulnerability VCID-7k2s-fmzx-a3d8
11
vulnerability VCID-9e77-3unf-r3hu
12
vulnerability VCID-a4u3-63ez-gfbc
13
vulnerability VCID-axaa-8h31-j3gd
14
vulnerability VCID-bdcb-c7nj-j7gw
15
vulnerability VCID-d8ft-cst1-5yh5
16
vulnerability VCID-fy1p-qh8k-m7b8
17
vulnerability VCID-gjne-rqt9-jqc5
18
vulnerability VCID-kxvn-yjm8-3ygt
19
vulnerability VCID-m5wq-1w2k-9khk
20
vulnerability VCID-nczx-qfyh-xubz
21
vulnerability VCID-pp2v-1dp5-4bbd
22
vulnerability VCID-qkp7-s947-ufcu
23
vulnerability VCID-r1ah-c6z7-vyen
24
vulnerability VCID-rukb-cwpx-q3hy
25
vulnerability VCID-ssk3-kfn8-vuhy
26
vulnerability VCID-xsvh-emr7-r7as
27
vulnerability VCID-yr1z-udw9-mfha
28
vulnerability VCID-zbwp-sfx4-xke7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ceph@10.2.11-2
6
url pkg:rpm/redhat/ceph@2:12.2.12-45?arch=el7cp
purl pkg:rpm/redhat/ceph@2:12.2.12-45?arch=el7cp
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fy1p-qh8k-m7b8
1
vulnerability VCID-ssk3-kfn8-vuhy
2
vulnerability VCID-yr1z-udw9-mfha
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ceph@2:12.2.12-45%3Farch=el7cp
7
url pkg:rpm/redhat/ceph-ansible@3.2.24-1?arch=el7cp
purl pkg:rpm/redhat/ceph-ansible@3.2.24-1?arch=el7cp
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fy1p-qh8k-m7b8
1
vulnerability VCID-ssk3-kfn8-vuhy
2
vulnerability VCID-yr1z-udw9-mfha
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ceph-ansible@3.2.24-1%3Farch=el7cp
8
url pkg:rpm/redhat/ceph-iscsi-config@2.6-19?arch=el7cp
purl pkg:rpm/redhat/ceph-iscsi-config@2.6-19?arch=el7cp
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fy1p-qh8k-m7b8
1
vulnerability VCID-ssk3-kfn8-vuhy
2
vulnerability VCID-yr1z-udw9-mfha
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ceph-iscsi-config@2.6-19%3Farch=el7cp
9
url pkg:rpm/redhat/cephmetrics@2.0.6-1?arch=el7cp
purl pkg:rpm/redhat/cephmetrics@2.0.6-1?arch=el7cp
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fy1p-qh8k-m7b8
1
vulnerability VCID-ssk3-kfn8-vuhy
2
vulnerability VCID-yr1z-udw9-mfha
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cephmetrics@2.0.6-1%3Farch=el7cp
10
url pkg:rpm/redhat/libntirpc@1.7.4-1?arch=el7cp
purl pkg:rpm/redhat/libntirpc@1.7.4-1?arch=el7cp
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fy1p-qh8k-m7b8
1
vulnerability VCID-ssk3-kfn8-vuhy
2
vulnerability VCID-yr1z-udw9-mfha
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/libntirpc@1.7.4-1%3Farch=el7cp
11
url pkg:rpm/redhat/nfs-ganesha@2.7.4-10?arch=el7cp
purl pkg:rpm/redhat/nfs-ganesha@2.7.4-10?arch=el7cp
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fy1p-qh8k-m7b8
1
vulnerability VCID-ssk3-kfn8-vuhy
2
vulnerability VCID-yr1z-udw9-mfha
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nfs-ganesha@2.7.4-10%3Farch=el7cp
12
url pkg:rpm/redhat/python-crypto@2.6.1-16?arch=el7ost
purl pkg:rpm/redhat/python-crypto@2.6.1-16?arch=el7ost
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fy1p-qh8k-m7b8
1
vulnerability VCID-ssk3-kfn8-vuhy
2
vulnerability VCID-yr1z-udw9-mfha
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-crypto@2.6.1-16%3Farch=el7ost
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16889.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16889.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16889
reference_id
reference_type
scores
0
value 0.00068
scoring_system epss
scoring_elements 0.20917
published_at 2026-04-01T12:55:00Z
1
value 0.00068
scoring_system epss
scoring_elements 0.20888
published_at 2026-04-16T12:55:00Z
2
value 0.00068
scoring_system epss
scoring_elements 0.20977
published_at 2026-04-09T12:55:00Z
3
value 0.00068
scoring_system epss
scoring_elements 0.20994
published_at 2026-04-11T12:55:00Z
4
value 0.00068
scoring_system epss
scoring_elements 0.20951
published_at 2026-04-12T12:55:00Z
5
value 0.00068
scoring_system epss
scoring_elements 0.20898
published_at 2026-04-13T12:55:00Z
6
value 0.00068
scoring_system epss
scoring_elements 0.21068
published_at 2026-04-02T12:55:00Z
7
value 0.00068
scoring_system epss
scoring_elements 0.21121
published_at 2026-04-04T12:55:00Z
8
value 0.00068
scoring_system epss
scoring_elements 0.20836
published_at 2026-04-07T12:55:00Z
9
value 0.00068
scoring_system epss
scoring_elements 0.20916
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16889
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16889
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16889
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16889
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16889
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url http://www.securityfocus.com/bid/106528
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/106528
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1665334
reference_id 1665334
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1665334
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=918969
reference_id 918969
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=918969
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:ceph:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:redhat:ceph:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:ceph:*:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-16889
reference_id CVE-2018-16889
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:N
1
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
2
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2018-16889
10
reference_url https://access.redhat.com/errata/RHSA-2019:2538
reference_id RHSA-2019:2538
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2538
11
reference_url https://access.redhat.com/errata/RHSA-2019:2541
reference_id RHSA-2019:2541
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2541
12
reference_url https://usn.ubuntu.com/4035-1/
reference_id USN-4035-1
reference_type
scores
url https://usn.ubuntu.com/4035-1/
Weaknesses
0
cwe_id 538
name Insertion of Sensitive Information into Externally-Accessible File or Directory
description The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information.
1
cwe_id 532
name Insertion of Sensitive Information into Log File
description Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.
2
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
3
cwe_id 200
name Exposure of Sensitive Information to an Unauthorized Actor
description The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
4
cwe_id 312
name Cleartext Storage of Sensitive Information
description The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Exploits
Severity_range_score5.0 - 7.5
Exploitability0.5
Weighted_severity6.8
Risk_score3.4
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-ssk3-kfn8-vuhy