# CVE-2020-25678: ceph-fuse: A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text CVE-2020-25678 is fixed in 37 products on 1 platform, first by ceph 15.2.12-0ubuntu0.20.04.1, released May 26, 2021. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2020-25678 - Priority: Routine - CVSS: n/a (Low) - EPSS: 0.0026 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jan 8, 2021 ## Description A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by searching the mgr logs for grafana and dashboard, with passwords visible. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | ceph Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | ceph-base Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph-base 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-base-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | ceph-common Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph-common 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-common-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | ceph-fuse Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph-fuse 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-fuse-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | ceph-immutable-object-cache Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph-immutable-object-cache 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-immutable-object-cache-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | ceph-mds Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph-mds 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-mds-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | ceph-mgr Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph-mgr 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-mgr-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | ceph-mgr-cephadm Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph-mgr-cephadm 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-mgr-cephadm-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | ceph-mgr-dashboard Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph-mgr-dashboard 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-mgr-dashboard-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | ceph-mgr-diskprediction-cloud Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph-mgr-diskprediction-cloud 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-mgr-diskprediction-cloud-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | ceph-mgr-diskprediction-local Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph-mgr-diskprediction-local 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-mgr-diskprediction-local-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | ceph-mgr-k8sevents Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph-mgr-k8sevents 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-mgr-k8sevents-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | ceph-mgr-modules-core Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph-mgr-modules-core 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-mgr-modules-core-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | ceph-mgr-rook Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph-mgr-rook 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-mgr-rook-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | ceph-mon Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph-mon 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-mon-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | ceph-osd Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph-osd 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-osd-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | ceph-resource-agents Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [ceph-resource-agents 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ceph-resource-agents-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | cephadm Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [cephadm 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-cephadm-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | cephfs-shell Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [cephfs-shell 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-cephfs-shell-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | libcephfs-java Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [libcephfs-java 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libcephfs-java-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | libcephfs-jni Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [libcephfs-jni 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libcephfs-jni-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | libcephfs2 Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [libcephfs2 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libcephfs2-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | librados2 Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [librados2 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-librados2-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | libradosstriper1 Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [libradosstriper1 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libradosstriper1-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | librbd1 Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [librbd1 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-librbd1-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | librgw2 Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [librgw2 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-librgw2-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | python3-ceph Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [python3-ceph 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python3-ceph-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | python3-ceph-argparse Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [python3-ceph-argparse 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python3-ceph-argparse-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | python3-ceph-common Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [python3-ceph-common 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python3-ceph-common-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | python3-cephfs Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [python3-cephfs 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python3-cephfs-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | python3-rados Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [python3-rados 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python3-rados-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | python3-rbd Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [python3-rbd 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python3-rbd-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | python3-rgw Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [python3-rgw 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python3-rgw-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | radosgw Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [radosgw 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-radosgw-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | rbd-fuse Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [rbd-fuse 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-rbd-fuse-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | rbd-mirror Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [rbd-mirror 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-rbd-mirror-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | | Linux | rbd-nbd Ubuntu 20.04 LTS (focal) | 15.2.12-0ubuntu0.20.04.1 | [rbd-nbd 15.2.12-0ubuntu0.20.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-rbd-nbd-15.2.12-0ubuntu0.20.04.1.md) | May 26, 2021 | --- Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.