CVE-2020-1716
A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. Any authenticated attacker can abuse th...
Affects 1 product across 1 vendor.
Software contains embedded passwords or keys that cannot be changed by the administrator.
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A security vulnerability in the ceph-ansible playbook involves hardcoded default passwords, which can be exploited by authenticated attackers to gain unauthorized access to Ceph clusters.
BSID: BS-2021-GLOBAL-147811-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2020-1716?
What is the CVSS score for CVE-2020-1716?
Is CVE-2020-1716 actively exploited?
How do I remediate CVE-2020-1716?
What systems are affected by CVE-2020-1716?
| CVE ID | CVE-2020-1716 |
|---|---|
| BSID | BS-2021-GLOBAL-147811-H BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| Published | 2021-05-28 |
| Last Modified | 2024-11-21 |
| ICS Relevance | 15% |
| Weakness (CWE) | |
| Source | NVD |
A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. Any authenticated attacker can abuse this flaw to brute-force Ceph deployments, and gain administrator access to Ceph clusters via the Ceph dashboard to initiate read, write, and delete Ceph clusters and also modify Ceph cluster configurations. Versions before ceph-ansible 6.0.0alpha1 are affected.
Source: NIST NVD / MITRE CVE Database
The vulnerability arises from hardcoded passwords in the ceph-ansible playbook used during the deployment of Ceph services. An attacker with access to the playbook or deployment environment can use these passwords to brute-force access to the Ceph dashboard, leading to full administrative control over the Ceph cluster.
Exploitation Likelihood: HIGH
| Vendor | Product | Affected Versions |
|---|---|---|
| Ceph | Ceph-Ansible | ≤ 5.0.3 |
No official vendor advisory link on record. See the CVE record →
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | fef6cb2b8c5c260d5fb96b84611f4c04252c4b276bbca4a33af9fc34b80bc7227b549e7083b195589af66b753fc64ffc93400f9cd39cb9581762965edbf461bd |
ICS/OT Vulnerability Intelligence for Your Environment
BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.
Create a free account →