Name: CVE-2018-14662: Improper Authorization
Creator: Rapid7
Published: 2019-01-15T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2018-14662, CWE-285, CWE-732, CVSS 5.7, EPSS 0.0049

It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption.

CVSS Details

CVSS 3.1 Base Score: 5.7
CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
CVSS 3.0 Base Score: 3.5
CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade cephmetrics-ansibleUpgrade libcephfs-develUpgrade python-cephfsUpgrade ceph-fuseUpgrade libntirpcUpgrade ceph-debuginfoUpgrade rbd-mirrorUpgrade librados-develUpgrade ceph-iscsi-configUpgrade librbd-develUpgrade ceph-commonUpgrade python-crypto-debuginfoUpgrade ceph-mdsUpgrade nfs-ganesha-debuginfoUpgrade python2-cryptoUpgrade nfs-ganesha-rgwUpgrade ceph-radosgwUpgrade nfs-ganeshaUpgrade ceph-baseUpgrade python-rgwUpgrade libradosstriper1Upgrade librgw2Upgrade ceph-ansibleUpgrade librgw-develUpgrade ceph-selinuxUpgrade libntirpc-debuginfoUpgrade nfs-ganesha-cephUpgrade libcephfs2	Mar 5, 2020	Jan 15, 2019
Debian	—	Upgrade ceph	Mar 12, 2019	Jan 15, 2019
Huawei Euleros 2_0_sp8	—	Upgrade python-rbdUpgrade librbd1Upgrade librados2Upgrade python-rados	Mar 24, 2020	Jan 15, 2019
Redhat_linux	—	Upgrade nfs-ganesha-cephUpgrade ceph-debuginfoUpgrade libcephfs2Upgrade libntirpcUpgrade rbd-mirrorUpgrade libcephfs-develUpgrade python2-cryptoUpgrade librgw-develUpgrade librados-develUpgrade nfs-ganeshaUpgrade ceph-baseUpgrade nfs-ganesha-debuginfoUpgrade libntirpc-debuginfoUpgrade ceph-radosgwUpgrade ceph-fuseUpgrade ceph-commonUpgrade cephmetrics-ansibleUpgrade ceph-selinuxUpgrade python-rgwUpgrade nfs-ganesha-rgwUpgrade python-cephfsUpgrade libradosstriper1Upgrade librgw2Upgrade python-crypto-debuginfoUpgrade librbd-develUpgrade ceph-iscsi-configUpgrade ceph-mdsUpgrade ceph-ansible	Mar 5, 2020	Jan 15, 2019
Suse	—	Upgrade ceph-baseUpgrade librgw-develUpgrade python3-rgwUpgrade python-rbdUpgrade ceph-mdsUpgrade libcephfs2Upgrade ceph-mgrUpgrade python3-cephfsUpgrade librgw2Upgrade libradosstriper-develUpgrade rbd-mirrorUpgrade ceph-commonUpgrade librados-develUpgrade ceph-resource-agentsUpgrade python3-rbdUpgrade ceph-osdUpgrade ceph-radosgwUpgrade rbd-nbdUpgrade python-radosUpgrade libradosstriper1Upgrade python-cephfsUpgrade ceph-monUpgrade rados-objclass-develUpgrade librbd1Upgrade libcephfs-develUpgrade ceph-testUpgrade ceph-fuseUpgrade librados2Upgrade librbd-develUpgrade python3-radosUpgrade python-rgwUpgrade rbd-fuseUpgrade ceph	Feb 27, 2019	Jan 15, 2019
Ubuntu	—	Upgrade ceph-common (Ubuntu Pro)Upgrade ceph-commonUpgrade cephUpgrade ceph (Ubuntu Pro)Upgrade radosgw (Ubuntu Pro)	Jun 25, 2019	Jan 15, 2019
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Jan 15, 2019

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence