← All advisories

Critical severity9.8NVD Advisory· Published Aug 15, 2019· Updated Jun 17, 2026

CVE-2018-14670

CVE-2018-14670

Description

Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database.

Affected products

3

Clickhouse/Clickhouse3 versions
cpe:2.3:a:clickhouse:clickhouse:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:clickhouse:clickhouse:*:*:*:*:*:*:*:*range: <1.1.54131
- (no CPE)range: <1.1.54131
- (no CPE)range: All versions prior to version 1.1.54131.

Patches

Vulnerability mechanics

References

1

clickhouse.yandex/docs/en/security_changelog/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.