Insecure Defaults

2020-06-0403:32:04

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

41.7%

JSON

ceph-ansible is vulnerable to Insecure Defaults. The vulnerability exists as it hard coded credential in ceph-ansible playbook.

CPENameOperatorVersion
python-xmlseceq1.3.3__7.el8
python-xmlseceq1.3.3__7.epel8.playground
cepheq0.94.5__15.el7cp
cepheq0.94.5__13.el7cp
cepheq12.2.4__42.el7
cepheq10.2.10__49.el7cp
cepheq12.2.1__0.el7
cepheq14.2.1__508.g0f9d32b.el8cp
cepheq0.80.5__4.el7ost
cepheq12.2.4__42.el7cp

Name	Operator	Version
python-xmlsec	eq	1.3.3__7.el8
python-xmlsec	eq	1.3.3__7.epel8.playground
ceph	eq	0.94.5__15.el7cp
ceph	eq	0.94.5__13.el7cp
ceph	eq	12.2.4__42.el7
ceph	eq	10.2.10__49.el7cp
ceph	eq	12.2.1__0.el7
ceph	eq	14.2.1__508.g0f9d32b.el8cp
ceph	eq	0.80.5__4.el7ost
ceph	eq	12.2.4__42.el7cp