CVE-2020-25678

State: Published
Severity: Not scored
Published: Jan 8, 2021
Updated: Feb 13, 2025
Reserved: Sep 16, 2020

Description

A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by searching the mgr logs for grafana and dashboard, with passwords visible.

Scores

The record has no CVSS score.

Weaknesses

CWE-312

Affected Products

Product	Versions
cephn/a	ceph versions prior to 16.y.zAffected

References

https://bugzilla.redhat.com/show_bug.cgi?id=1892109
https://tracker.ceph.com/issues/37503
FEDORA-2021-93ff9e9103vendor-advisory
GLSA-202105-39vendor-advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.