CVE-2018-14670
published 2019-08-15CVE-2018-14670: Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database.
PriorityP349critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
1.79%
75.7th percentile
Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| clickhouse | clickhouse | < 1.1.54131 | 1.1.54131 |
| clickhouse | clickhouse | — | — |
| clickhouse | clickhouse | >= 0 < 18.16.1+ds-7 | 18.16.1+ds-7 |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-f4x7-6ghc-chgp: Incorrect configuration in deb package in ClickHouse before 1
ghsa_unreviewed·2022-05-24
CVE-2018-14670 [CRITICAL] CWE-285 GHSA-f4x7-6ghc-chgp: Incorrect configuration in deb package in ClickHouse before 1
Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database.
OSV
CVE-2018-14670: Incorrect configuration in deb package in ClickHouse before 1
osv·2019-08-15·CVSS 9.8
CVE-2018-14670 [CRITICAL] CVE-2018-14670: Incorrect configuration in deb package in ClickHouse before 1
Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-08-15
Published