CVE-2020-25678CWE-312

A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text

published January 8, 2021

CVSS
—
EPSS
0%
Percentile
18.6
In the wild
Unconfirmed
What it is

A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by searching the mgr logs for grafana and dashboard, with passwords visible.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00272 · 18.6th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2021-01-08T17:59Z
EPSS history
Timeline
  • 08 JAN 17:59Z
    A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text
    cvelistv5