[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyFxu3txgjM59efagi2ZkDFGAXZKpYIlGV4zzTPDRXB0":3,"g5a-risk:CVE-2018-1128":232},{"success":4,"data":5,"meta":230},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":88,"references":89,"referencesCount":137,"weaknesses":138,"weaknessesCount":154,"isActivelyExploited":155,"cisaInfo":15,"otxData":15,"relatedBlogPosts":156,"seoMetadata":157,"configurations":182,"relatedVendorCves":228,"notableEvents":229},"CVE-2018-1128","What is CVE-2018-1128?","It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.","It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph...","2018-07-10T14:29:00.37","2020-11-17T19:15:10.92",7.5,"CVSS:3.0\u002FAV:A\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":28,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","ADJACENT_NETWORK","HIGH","NONE","UNCHANGED",1.6,5.9,[29],{"Source":18,"Type":19,"CVSSData":30,"BaseSeverity":33,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":31,"VectorString":32,"AccessVector":22,"AccessComplexity":33,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:A\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",5.4,5.5,6.4,0.01386,[38,38,38,38,38,38,38],"High",[42,47,51,53,56,58,62,65,68,71,75,80,83],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"redhat","ceph_storage","3","cpe:2.3:a:redhat:ceph_storage:3:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":49,"criteria":50,"vulnerable":4},"ceph_storage_mon","2","cpe:2.3:a:redhat:ceph_storage_mon:2:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":45,"criteria":52,"vulnerable":4},"cpe:2.3:a:redhat:ceph_storage_mon:3:*:*:*:*:*:*:*",{"vendor":43,"product":54,"version":49,"criteria":55,"vulnerable":4},"ceph_storage_osd","cpe:2.3:a:redhat:ceph_storage_osd:2:*:*:*:*:*:*:*",{"vendor":43,"product":54,"version":45,"criteria":57,"vulnerable":4},"cpe:2.3:a:redhat:ceph_storage_osd:3:*:*:*:*:*:*:*",{"vendor":43,"product":59,"version":60,"criteria":61,"vulnerable":4},"enterprise_linux","7.0","cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",{"vendor":43,"product":63,"version":60,"criteria":64,"vulnerable":4},"enterprise_linux_desktop","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",{"vendor":43,"product":66,"version":60,"criteria":67,"vulnerable":4},"enterprise_linux_server","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",{"vendor":43,"product":69,"version":60,"criteria":70,"vulnerable":4},"enterprise_linux_workstation","cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",{"vendor":43,"product":72,"version":73,"criteria":74,"vulnerable":4},"ceph","*","cpe:2.3:a:redhat:ceph:*:*:*:*:*:*:*:*",{"vendor":76,"product":77,"version":78,"criteria":79,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":76,"product":77,"version":81,"criteria":82,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":84,"product":85,"version":86,"criteria":87,"vulnerable":4},"opensuse","leap","15.0","cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",13,[90,95,101,105,108,112,115,118,121,125,129,134],{"url":91,"source":92,"tags":93},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-04\u002Fmsg00100.html","Opensuse",[94],"Third Party Advisory",{"url":96,"source":97,"tags":98},"http:\u002F\u002Ftracker.ceph.com\u002Fissues\u002F24836","Ceph",[99,100],"Issue Tracking","Vendor Advisory",{"url":102,"source":103,"tags":104},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2020\u002F11\u002F17\u002F3","Openwall",[],{"url":106,"source":103,"tags":107},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2020\u002F11\u002F17\u002F4",[],{"url":109,"source":110,"tags":111},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2177","Red Hat",[94],{"url":113,"source":110,"tags":114},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2179",[94],{"url":116,"source":110,"tags":117},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2261",[94],{"url":119,"source":110,"tags":120},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2274",[94],{"url":122,"source":110,"tags":123},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1575866",[99,124,94],"Patch",{"url":126,"source":127,"tags":128},"https:\u002F\u002Fgithub.com\u002Fceph\u002Fceph\u002Fcommit\u002F5ead97120e07054d80623dada90a5cc764c28468","GitHub",[124,94],{"url":130,"source":131,"tags":132},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F03\u002Fmsg00017.html","Debian",[133,94],"Mailing List",{"url":135,"source":131,"tags":136},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4339",[94],12,[139,147],{"id":140,"name":141,"description":142,"extendedDescription":143,"status":144,"abstraction":145,"structure":146},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",{"id":148,"name":149,"description":150,"extendedDescription":151,"status":152,"abstraction":153,"structure":146},"CWE-294","Authentication Bypass by Capture-replay","A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).","Capture-replay attacks are common and can be difficult to defeat without cryptography. They are a subset of network injection attacks that rely on observing previously-sent valid commands, then changing them slightly if necessary and resending the same commands to the server.","Incomplete","Base",2,false,[],{"title":158,"metaDescription":159,"keywords":160,"canonicalUrl":161,"structuredData":162},"What is CVE-2018-1128? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-1128, a high severity cyber security vulnerability from 2018. It was found that cephx authentication protocol did not veri...","CVE-2018-1128, CVE-2018-1128 vulnerability, CVE-2018-1128 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, redhat security, ceph_storage vulnerability, ceph_storage_mon vulnerability, ceph_storage_osd vulnerability, enterprise_linux vulnerability, enterprise_linux_desktop vulnerability","\u002Fwhat-is\u002Fcve-2018-1128",{"@context":163,"@type":164,"headline":158,"description":159,"datePublished":10,"dateModified":11,"author":165,"publisher":169,"about":173,"mainEntityOfPage":177,"articleSection":180,"keywords":181},"https:\u002F\u002Fschema.org","TechArticle",{"@type":166,"name":167,"url":168},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":166,"name":167,"url":168,"logo":170},{"@type":171,"url":172},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":174,"name":6,"description":175,"additionalType":176},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":178,"@id":179},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-1128","Cybersecurity","CVE-2018-1128, CVE-2018-1128 vulnerability, CVE-2018-1128 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[183,206,214,222],{"Operator":15,"Negate":15,"Nodes":184},[185],{"Operator":186,"Negate":15,"CPEMatch":187},"OR",[188,190,192,194,196,198,200,202,204],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":189,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E9184616-421F-4EA9-AC1A-A4C95BBAAC99",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":191,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8C2EBAD9-F0D5-4176-9C4D-001B230E699E",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":193,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"CD2F9BA8-FE0A-43DE-A756-C35A24C3D96E",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":195,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"AA5F5227-DBDA-4C01-BF7C-4D53F455404F",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":197,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A80BACB5-7A56-4BC6-9261-58A3860F4E8C",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":199,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"142AD0DD-4CF3-4D74-9442-459CE3347E3A",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":201,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"33C068A4-3780-4EAB-A937-6082DF847564",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":203,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"51EF4996-72F4-4FA4-814F-F5991E7A8318",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":205,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"825ECE2D-E232-46E0-A047-074B34DB1E97",{"Operator":15,"Negate":15,"Nodes":207},[208],{"Operator":186,"Negate":15,"CPEMatch":209},[210],{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":211,"VersionStartExcluding":15,"VersionStartIncluding":212,"VersionEndExcluding":15,"VersionEndIncluding":213},"1E50612E-0E8A-4CCE-91DB-502079B9540C","10.2.0","13.2.1",{"Operator":15,"Negate":15,"Nodes":215},[216],{"Operator":186,"Negate":15,"CPEMatch":217},[218,220],{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":219,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":221,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":15,"Negate":15,"Nodes":223},[224],{"Operator":186,"Negate":15,"CPEMatch":225},[226],{"Vulnerable":4,"Criteria":87,"MatchCriteriaID":227,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F1E78106-58E6-4D59-990F-75DA575BFAD9",[],[],{"lastModified":11,"cacheTime":231,"version":31},1792262072300,{"score":233,"band":234,"action":235,"scoredAt":236},46,"Medium","Plan remediation","2026-10-16T06:44:27.298725+00:00"]