What the vulnerability does
01Description
A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by searching the mgr logs for grafana and dashboard, with passwords visible.
CVSS base score
—
Key dates
02Disclosure timeline
January 8, 2021
CVE published
February 13, 2025
Record updated
External resources
