The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the browser’s localStorage which is potentially vulnerable to attackers via XSS attacks. The highest threat from this vulnerability is to data confidentiality and integrity.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ceph-base-debuginfoUpgrade librados-develUpgrade python3-rgw-debuginfoUpgrade rbd-nbdUpgrade ceph-fuseUpgrade librgw-develUpgrade libtcmuUpgrade ceph-mgr-debuginfoUpgrade ceph-radosgwUpgrade python-cephfsUpgrade ceph-iscsiUpgrade rbd-mirror-debuginfoUpgrade rbd-nbd-debuginfoUpgrade rbd-mirrorUpgrade libradospp-develUpgrade libcephfs2-debuginfoUpgrade ceph-baseUpgrade ceph-commonUpgrade python3-rbd-debuginfoUpgrade ceph-grafana-dashboardsUpgrade libcephfs-develUpgrade librados-devel-debuginfoUpgrade ceph-debuginfoUpgrade ceph-mds-debuginfoUpgrade tcmu-runnerUpgrade python3-radosUpgrade python3-cephfsUpgrade python3-ceph-argparseUpgrade python3-rgwUpgrade python3-cephfs-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-selinuxUpgrade ceph-common-debuginfoUpgrade python-rgwUpgrade ceph-mon-debuginfoUpgrade ceph-ansibleUpgrade ceph-osd-debuginfoUpgrade libcephfs2Upgrade python3-rados-debuginfoUpgrade librgw2Upgrade libradosstriper1-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-mdsUpgrade libradosstriper1Upgrade python-ceph-argparseUpgrade rbd-fuse-debuginfoUpgrade python3-rbdUpgrade ceph-test-debuginfoUpgrade ceph-fuse-debuginfoUpgrade librbd-develUpgrade ceph-debugsource | Jun 16, 2021 | May 26, 2021 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | May 26, 2021 |
| Redhat_linux | — | Upgrade librgw2Upgrade python3-rgwUpgrade ceph-common-debuginfoUpgrade python3-cephfs-debuginfoUpgrade ceph-iscsiUpgrade python3-rados-debuginfoUpgrade python-cephfsUpgrade rbd-mirror-debuginfoUpgrade rbd-mirrorUpgrade ceph-radosgw-debuginfoUpgrade ceph-osd-debuginfoUpgrade python3-radosUpgrade ceph-radosgwUpgrade libradosstriper1Upgrade ceph-mds-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-ansibleUpgrade ceph-fuseUpgrade ceph-selinuxUpgrade ceph-mdsUpgrade ceph-mon-debuginfoUpgrade python-rgwUpgrade python-ceph-argparseUpgrade python3-cephfsUpgrade python3-rgw-debuginfoUpgrade librbd-develUpgrade librgw2-debuginfoUpgrade libradosstriper1-debuginfoUpgrade rbd-nbdUpgrade ceph-base-debuginfoUpgrade ceph-baseUpgrade libcephfs2-debuginfoUpgrade libtcmuUpgrade ceph-debuginfoUpgrade libradospp-develUpgrade librgw-develUpgrade tcmu-runnerUpgrade python3-rbd-debuginfoUpgrade ceph-mgr-debuginfoUpgrade python3-rbdUpgrade ceph-fuse-debuginfoUpgrade libcephfs2Upgrade ceph-grafana-dashboardsUpgrade libcephfs-develUpgrade ceph-debugsourceUpgrade librados-develUpgrade ceph-commonUpgrade librados-devel-debuginfoUpgrade rbd-nbd-debuginfoUpgrade rbd-fuse-debuginfoUpgrade python3-ceph-argparse | Jun 16, 2021 | May 26, 2021 |
| Suse | — | Upgrade ceph-commonUpgrade ceph-mgr-cephadmUpgrade ceph-mgr-dashboardUpgrade rbd-mirrorUpgrade ceph-osdUpgrade libradospp-develUpgrade python3-radosUpgrade rbd-nbdUpgrade ceph-mdsUpgrade python3-ceph-argparseUpgrade ceph-testUpgrade python3-cephfsUpgrade ceph-prometheus-alertsUpgrade ceph-mgrUpgrade ceph-baseUpgrade python3-rbdUpgrade cephfs-shellUpgrade libcephfs-develUpgrade ceph-mgr-diskprediction-localUpgrade ceph-mgr-modules-coreUpgrade cephUpgrade librgw2Upgrade ceph-mgr-rookUpgrade librbd-develUpgrade librbd1Upgrade rados-objclass-develUpgrade librados2Upgrade libcephfs2Upgrade librados-develUpgrade cephadmUpgrade rbd-fuseUpgrade ceph-immutable-object-cacheUpgrade ceph-fuseUpgrade python3-ceph-commonUpgrade ceph-radosgwUpgrade ceph-grafana-dashboardsUpgrade python3-rgwUpgrade ceph-monUpgrade ceph-mgr-diskprediction-cloudUpgrade librgw-develUpgrade ceph-mgr-k8sevents | Apr 13, 2021 | Apr 9, 2021 |
| Ubuntu | — | Upgrade ceph-baseUpgrade ceph-mgr-rookUpgrade ceph-mgr-modules-coreUpgrade ceph-mgrUpgrade ceph-commonUpgrade ceph-mgr-k8seventsUpgrade radosgwUpgrade cephadmUpgrade ceph-mgr-dashboardUpgrade ceph-mgr-cephadmUpgrade cephUpgrade ceph-mgr-diskprediction-localUpgrade ceph-mgr-diskprediction-cloud | Jun 25, 2021 | Apr 9, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub