CVE-2018-16498 Information disclosure in Versa Director

What is CVE-2018-16498?

CVE-2018-16498 is a medium-severity vulnerability in Versa Director, published on 26 May 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In Versa Director, the unencrypted backup files stored on the Versa deployment contain credentials stored within configuration files. These credentials are for various application components such as SNMP, and SSL and Trust keystores.

Weakness: CWE-312

Which versions are affected by CVE-2018-16498?

It affects 1 product.

Products include Versa-Networks Versa Director.

How do I fix CVE-2018-16498?

No fix has been published for CVE-2018-16498 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-16498 being exploited?

There is no known exploitation of CVE-2018-16498 in the wild and no public exploit code.

Other vulnerabilities in Versa Director

• CVE-2024-39717 Versa Director Dangerous File Type Upload Exploited Medium 6.6
• CVE-2024-42450 Hardcoded credentials in Director Critical 10.0
• CVE-2025-24288 Hardcoded credentials in Director Critical 9.8
• CVE-2019-25029 Command injection in Versa Director Critical 9.8
• CVE-2025-23173 Information disclosure in Director High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-pc3c-mp2m-rr8w.