Name: CVE-2018-14662: Improper Authorization
Creator: Rapid7
Published: 2019-01-15T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2018-14662, CWE-285, CWE-732, CVSS 5.7, EPSS 0.0049

It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption.

CVSS Details

CVSS 3.1 Base Score: 5.7
CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
CVSS 3.0 Base Score: 3.5
CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade cephmetrics-ansibleUpgrade rbd-mirrorUpgrade libcephfs-develUpgrade librados-develUpgrade python2-cryptoUpgrade libntirpcUpgrade ceph-mdsUpgrade ceph-debuginfoUpgrade python-crypto-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade ceph-commonUpgrade ceph-iscsi-configUpgrade librbd-develUpgrade python-cephfsUpgrade ceph-fuseUpgrade nfs-ganesha-rgwUpgrade libcephfs2Upgrade ceph-selinuxUpgrade python-rgwUpgrade libntirpc-debuginfoUpgrade librgw2Upgrade nfs-ganeshaUpgrade nfs-ganesha-cephUpgrade librgw-develUpgrade ceph-radosgwUpgrade ceph-baseUpgrade ceph-ansibleUpgrade libradosstriper1	Mar 5, 2020	Jan 15, 2019
Debian	—	Upgrade ceph	Mar 12, 2019	Jan 15, 2019
Huawei Euleros 2_0_sp8	—	Upgrade librbd1Upgrade python-rbdUpgrade librados2Upgrade python-rados	Mar 24, 2020	Jan 15, 2019
Redhat_linux	—	Upgrade libradosstriper1Upgrade librgw2Upgrade python-rgwUpgrade python-cephfsUpgrade nfs-ganesha-rgwUpgrade ceph-iscsi-configUpgrade librbd-develUpgrade ceph-mdsUpgrade python-crypto-debuginfoUpgrade ceph-selinuxUpgrade ceph-commonUpgrade cephmetrics-ansibleUpgrade ceph-radosgwUpgrade ceph-ansibleUpgrade ceph-fuseUpgrade rbd-mirrorUpgrade libcephfs-develUpgrade librgw-develUpgrade ceph-baseUpgrade python2-cryptoUpgrade libntirpcUpgrade nfs-ganesha-debuginfoUpgrade ceph-debuginfoUpgrade libntirpc-debuginfoUpgrade librados-develUpgrade libcephfs2Upgrade nfs-ganeshaUpgrade nfs-ganesha-ceph	Mar 5, 2020	Jan 15, 2019
Suse	—	Upgrade librbd-develUpgrade libcephfs-develUpgrade ceph-testUpgrade python-rgwUpgrade rbd-fuseUpgrade librbd1Upgrade librados2Upgrade python-cephfsUpgrade rbd-nbdUpgrade ceph-fuseUpgrade ceph-monUpgrade python-radosUpgrade rados-objclass-develUpgrade libradosstriper1Upgrade ceph-radosgwUpgrade cephUpgrade python3-radosUpgrade ceph-baseUpgrade python-rbdUpgrade librgw-develUpgrade librados-develUpgrade python3-rgwUpgrade ceph-osdUpgrade rbd-mirrorUpgrade ceph-mgrUpgrade python3-rbdUpgrade librgw2Upgrade ceph-commonUpgrade libradosstriper-develUpgrade libcephfs2Upgrade ceph-resource-agentsUpgrade ceph-mdsUpgrade python3-cephfs	Feb 27, 2019	Jan 15, 2019
Ubuntu	—	Upgrade ceph (Ubuntu Pro)Upgrade radosgw (Ubuntu Pro)Upgrade cephUpgrade ceph-common (Ubuntu Pro)Upgrade ceph-common	Jun 25, 2019	Jan 15, 2019
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Jan 15, 2019

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence