CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

CVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.

unknownCVE-2018-1128

CSIRTS triage

vendor: Cephproduct: CephAuthentication bypass
What
Cephx authentication protocol does not properly verify clients and is vulnerable to replay attacks.
Who is affected
Ceph cluster deployments where attackers have network access to sniff cluster traffic.
Urgency
High priority; unauthenticated cluster access possible via replay; remediation critical.
Action
Patch Ceph to version with cephx replay protection and credential validation fixes.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Ceph

Get an email when a new Ceph advisory drops — max one per day, one-click unsubscribe.

Details

Source
Microsoft Security Response Center (INTL · vendor-psirt · site)
Severity
unknown
Published
2026-08-06
Exploitation
Not in CISA KEV at last sync

Original advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2018-1128

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2018-1128coverage & exploitation statusNVD · CVE.org

Recent advisories for It was found

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

More from Microsoft Security Response Center