The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the browser’s localStorage which is potentially vulnerable to attackers via XSS attacks. The highest threat from this vulnerability is to data confidentiality and integrity.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ceph-common-debuginfoUpgrade ceph-selinuxUpgrade librgw2Upgrade librgw2-debuginfoUpgrade python3-rados-debuginfoUpgrade libcephfs2Upgrade ceph-radosgw-debuginfoUpgrade ceph-fuse-debuginfoUpgrade libradosstriper1-debuginfoUpgrade ceph-mdsUpgrade ceph-test-debuginfoUpgrade python3-rbdUpgrade python3-rgwUpgrade ceph-osd-debuginfoUpgrade librbd-develUpgrade ceph-debugsourceUpgrade python3-cephfsUpgrade python3-radosUpgrade python3-cephfs-debuginfoUpgrade tcmu-runnerUpgrade ceph-mon-debuginfoUpgrade python-rgwUpgrade libradosstriper1Upgrade python-ceph-argparseUpgrade ceph-ansibleUpgrade rbd-fuse-debuginfoUpgrade python3-ceph-argparseUpgrade libradospp-develUpgrade rbd-nbdUpgrade ceph-mds-debuginfoUpgrade ceph-debuginfoUpgrade librados-devel-debuginfoUpgrade libcephfs-develUpgrade rbd-nbd-debuginfoUpgrade python-cephfsUpgrade ceph-mgr-debuginfoUpgrade ceph-iscsiUpgrade ceph-commonUpgrade ceph-baseUpgrade librgw-develUpgrade libtcmuUpgrade python3-rgw-debuginfoUpgrade librados-develUpgrade ceph-fuseUpgrade ceph-base-debuginfoUpgrade rbd-mirror-debuginfoUpgrade ceph-radosgwUpgrade libcephfs2-debuginfoUpgrade ceph-grafana-dashboardsUpgrade python3-rbd-debuginfoUpgrade rbd-mirror | Jun 16, 2021 | May 26, 2021 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | May 26, 2021 |
| Redhat_linux | — | Upgrade libtcmuUpgrade ceph-grafana-dashboardsUpgrade libcephfs-develUpgrade tcmu-runnerUpgrade libcephfs2Upgrade libradospp-develUpgrade libcephfs2-debuginfoUpgrade ceph-baseUpgrade ceph-fuse-debuginfoUpgrade rbd-nbd-debuginfoUpgrade ceph-mgr-debuginfoUpgrade librados-devel-debuginfoUpgrade python3-rbdUpgrade python3-ceph-argparseUpgrade ceph-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-base-debuginfoUpgrade librgw-develUpgrade librados-develUpgrade ceph-commonUpgrade rbd-fuse-debuginfoUpgrade ceph-debugsourceUpgrade ceph-mdsUpgrade librgw2-debuginfoUpgrade rbd-nbdUpgrade libradosstriper1-debuginfoUpgrade python-rgwUpgrade ceph-radosgw-debuginfoUpgrade ceph-osd-debuginfoUpgrade libradosstriper1Upgrade python3-rgw-debuginfoUpgrade ceph-iscsiUpgrade ceph-ansibleUpgrade ceph-selinuxUpgrade rbd-mirrorUpgrade librbd-develUpgrade python3-rgwUpgrade python3-cephfs-debuginfoUpgrade python-cephfsUpgrade python3-rados-debuginfoUpgrade ceph-mon-debuginfoUpgrade python-ceph-argparseUpgrade ceph-fuseUpgrade ceph-mds-debuginfoUpgrade ceph-radosgwUpgrade librgw2Upgrade ceph-common-debuginfoUpgrade ceph-test-debuginfoUpgrade python3-radosUpgrade rbd-mirror-debuginfoUpgrade python3-cephfs | Jun 16, 2021 | May 26, 2021 |
| Suse | — | Upgrade python3-ceph-commonUpgrade ceph-radosgwUpgrade ceph-grafana-dashboardsUpgrade librbd1Upgrade librgw-develUpgrade ceph-mgr-k8seventsUpgrade rados-objclass-develUpgrade ceph-mgr-diskprediction-cloudUpgrade rbd-fuseUpgrade librbd-develUpgrade librados2Upgrade libcephfs2Upgrade ceph-immutable-object-cacheUpgrade ceph-fuseUpgrade python3-rgwUpgrade ceph-monUpgrade librados-develUpgrade ceph-mgr-rookUpgrade cephadmUpgrade python3-rbdUpgrade rbd-nbdUpgrade ceph-baseUpgrade ceph-mgr-cephadmUpgrade ceph-mdsUpgrade python3-radosUpgrade cephUpgrade ceph-osdUpgrade librgw2Upgrade python3-ceph-argparseUpgrade python3-cephfsUpgrade ceph-prometheus-alertsUpgrade libradospp-develUpgrade ceph-mgr-dashboardUpgrade libcephfs-develUpgrade rbd-mirrorUpgrade ceph-commonUpgrade cephfs-shellUpgrade ceph-testUpgrade ceph-mgr-diskprediction-localUpgrade ceph-mgr-modules-coreUpgrade ceph-mgr | Apr 13, 2021 | Apr 9, 2021 |
| Ubuntu | — | Upgrade ceph-mgr-diskprediction-localUpgrade ceph-mgr-diskprediction-cloudUpgrade cephadmUpgrade cephUpgrade ceph-mgr-cephadmUpgrade ceph-mgr-k8seventsUpgrade ceph-mgr-dashboardUpgrade radosgwUpgrade ceph-baseUpgrade ceph-mgr-modules-coreUpgrade ceph-mgrUpgrade ceph-commonUpgrade ceph-mgr-rook | Jun 25, 2021 | Apr 9, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub