Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-14672

In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.8%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
Products affected by CVE-2018-14672
  • Yandex » Clickhouse » Version: N/A
    cpe:2.3:a:yandex:clickhouse:-
  • Yandex » Clickhouse » Version: 1.1.54011
    cpe:2.3:a:yandex:clickhouse:1.1.54011
  • Yandex » Clickhouse » Version: 1.1.54019
    cpe:2.3:a:yandex:clickhouse:1.1.54019
  • Yandex » Clickhouse » Version: 1.1.54020
    cpe:2.3:a:yandex:clickhouse:1.1.54020
  • Yandex » Clickhouse » Version: 1.1.54022
    cpe:2.3:a:yandex:clickhouse:1.1.54022
  • Yandex » Clickhouse » Version: 1.1.54023
    cpe:2.3:a:yandex:clickhouse:1.1.54023
  • Yandex » Clickhouse » Version: 1.1.54030
    cpe:2.3:a:yandex:clickhouse:1.1.54030
  • Yandex » Clickhouse » Version: 1.1.54046
    cpe:2.3:a:yandex:clickhouse:1.1.54046
  • Yandex » Clickhouse » Version: 1.1.54074
    cpe:2.3:a:yandex:clickhouse:1.1.54074
  • Yandex » Clickhouse » Version: 1.1.54080
    cpe:2.3:a:yandex:clickhouse:1.1.54080
  • Yandex » Clickhouse » Version: 1.1.54083
    cpe:2.3:a:yandex:clickhouse:1.1.54083
  • Yandex » Clickhouse » Version: 1.1.54112
    cpe:2.3:a:yandex:clickhouse:1.1.54112
  • Yandex » Clickhouse » Version: 1.1.54127
    cpe:2.3:a:yandex:clickhouse:1.1.54127
  • Yandex » Clickhouse » Version: 1.1.54131
    cpe:2.3:a:yandex:clickhouse:1.1.54131
  • Yandex » Clickhouse » Version: 1.1.54133
    cpe:2.3:a:yandex:clickhouse:1.1.54133
  • Yandex » Clickhouse » Version: 1.1.54134
    cpe:2.3:a:yandex:clickhouse:1.1.54134
  • Yandex » Clickhouse » Version: 1.1.54135
    cpe:2.3:a:yandex:clickhouse:1.1.54135
  • Yandex » Clickhouse » Version: 1.1.54144
    cpe:2.3:a:yandex:clickhouse:1.1.54144
  • Yandex » Clickhouse » Version: 1.1.54159
    cpe:2.3:a:yandex:clickhouse:1.1.54159
  • Yandex » Clickhouse » Version: 1.1.54165
    cpe:2.3:a:yandex:clickhouse:1.1.54165
  • Yandex » Clickhouse » Version: 1.1.54181
    cpe:2.3:a:yandex:clickhouse:1.1.54181
  • Yandex » Clickhouse » Version: 1.1.54188
    cpe:2.3:a:yandex:clickhouse:1.1.54188
  • Yandex » Clickhouse » Version: 1.1.54190
    cpe:2.3:a:yandex:clickhouse:1.1.54190
  • Yandex » Clickhouse » Version: 1.1.54198
    cpe:2.3:a:yandex:clickhouse:1.1.54198
  • Yandex » Clickhouse » Version: 1.1.54231
    cpe:2.3:a:yandex:clickhouse:1.1.54231
  • Yandex » Clickhouse » Version: 1.1.54236
    cpe:2.3:a:yandex:clickhouse:1.1.54236
  • Yandex » Clickhouse » Version: 1.1.54242
    cpe:2.3:a:yandex:clickhouse:1.1.54242
  • Yandex » Clickhouse » Version: 1.1.54245
    cpe:2.3:a:yandex:clickhouse:1.1.54245
  • Yandex » Clickhouse » Version: 1.1.54276
    cpe:2.3:a:yandex:clickhouse:1.1.54276
  • Yandex » Clickhouse » Version: 1.1.54282
    cpe:2.3:a:yandex:clickhouse:1.1.54282
  • Yandex » Clickhouse » Version: 1.1.54284
    cpe:2.3:a:yandex:clickhouse:1.1.54284
  • Yandex » Clickhouse » Version: 1.1.54289
    cpe:2.3:a:yandex:clickhouse:1.1.54289
  • Yandex » Clickhouse » Version: 1.1.54292
    cpe:2.3:a:yandex:clickhouse:1.1.54292
  • Yandex » Clickhouse » Version: 1.1.54304
    cpe:2.3:a:yandex:clickhouse:1.1.54304
  • Yandex » Clickhouse » Version: 1.1.54310
    cpe:2.3:a:yandex:clickhouse:1.1.54310
  • Yandex » Clickhouse » Version: 1.1.54318
    cpe:2.3:a:yandex:clickhouse:1.1.54318
  • Yandex » Clickhouse » Version: 1.1.54327
    cpe:2.3:a:yandex:clickhouse:1.1.54327
  • Yandex » Clickhouse » Version: 1.1.54335
    cpe:2.3:a:yandex:clickhouse:1.1.54335
  • Yandex » Clickhouse » Version: 1.1.54336
    cpe:2.3:a:yandex:clickhouse:1.1.54336
  • Yandex » Clickhouse » Version: 1.1.54337
    cpe:2.3:a:yandex:clickhouse:1.1.54337
  • Yandex » Clickhouse » Version: 1.1.54342
    cpe:2.3:a:yandex:clickhouse:1.1.54342
  • Yandex » Clickhouse » Version: 1.1.54343
    cpe:2.3:a:yandex:clickhouse:1.1.54343
  • Yandex » Clickhouse » Version: 1.1.54358
    cpe:2.3:a:yandex:clickhouse:1.1.54358
  • Yandex » Clickhouse » Version: 1.1.54362
    cpe:2.3:a:yandex:clickhouse:1.1.54362
  • Yandex » Clickhouse » Version: 1.1.54370
    cpe:2.3:a:yandex:clickhouse:1.1.54370
  • Yandex » Clickhouse » Version: 1.1.54378
    cpe:2.3:a:yandex:clickhouse:1.1.54378
  • Yandex » Clickhouse » Version: 1.1.54380
    cpe:2.3:a:yandex:clickhouse:1.1.54380
  • Yandex » Clickhouse » Version: 1.1.54381
    cpe:2.3:a:yandex:clickhouse:1.1.54381
  • Yandex » Clickhouse » Version: 1.1.54383
    cpe:2.3:a:yandex:clickhouse:1.1.54383
  • Yandex » Clickhouse » Version: 1.1.54385
    cpe:2.3:a:yandex:clickhouse:1.1.54385
  • Yandex » Clickhouse » Version: 1.1.54388
    cpe:2.3:a:yandex:clickhouse:1.1.54388
  • Yandex » Clickhouse » Version: 1.1.54390
    cpe:2.3:a:yandex:clickhouse:1.1.54390
  • Yandex » Clickhouse » Version: 1.1.54394
    cpe:2.3:a:yandex:clickhouse:1.1.54394
  • Yandex » Clickhouse » Version: 18.1.0
    cpe:2.3:a:yandex:clickhouse:18.1.0
  • Yandex » Clickhouse » Version: 18.10.3
    cpe:2.3:a:yandex:clickhouse:18.10.3
  • Yandex » Clickhouse » Version: 18.4.0
    cpe:2.3:a:yandex:clickhouse:18.4.0
  • Yandex » Clickhouse » Version: 18.5.1
    cpe:2.3:a:yandex:clickhouse:18.5.1
  • Yandex » Clickhouse » Version: 18.6.0
    cpe:2.3:a:yandex:clickhouse:18.6.0


Contact Us

Shodan ® - All rights reserved