The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to an httpOnly cookie. However, token cookies are used in the body of the HTTP response for the documentation, which again makes it available to XSS.The greatest threat to the system is for confidentiality, integrity, and availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ceph16Upgrade ceph | Aug 22, 2024 | May 26, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 26, 2021 |
| Centos_linux | — | Upgrade ceph-base-debuginfoUpgrade librbd-develUpgrade ceph-fuseUpgrade ceph-ansibleUpgrade rbd-mirror-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade python3-cephfs-debuginfoUpgrade ceph-selinuxUpgrade ceph-mds-debuginfoUpgrade librados-devel-debuginfoUpgrade tcmu-runnerUpgrade ceph-test-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-radosgwUpgrade ceph-common-debuginfoUpgrade ceph-iscsiUpgrade ceph-mgr-debuginfoUpgrade libradosstriper1Upgrade python-rgwUpgrade libradosstriper1-debuginfoUpgrade python-ceph-argparseUpgrade libcephfs2-debuginfoUpgrade rbd-mirrorUpgrade python3-cephfsUpgrade rbd-nbd-debuginfoUpgrade ceph-debuginfoUpgrade libcephfs2Upgrade python3-ceph-argparseUpgrade python3-rados-debuginfoUpgrade python3-rbdUpgrade rbd-nbdUpgrade rbd-fuse-debuginfoUpgrade ceph-mon-debuginfoUpgrade python-cephfsUpgrade ceph-grafana-dashboardsUpgrade ceph-debugsourceUpgrade librgw2Upgrade ceph-osd-debuginfoUpgrade libtcmuUpgrade libradospp-develUpgrade librados-develUpgrade python3-radosUpgrade librgw2-debuginfoUpgrade ceph-mdsUpgrade ceph-commonUpgrade ceph-baseUpgrade python3-rgwUpgrade librgw-develUpgrade libcephfs-develUpgrade ceph-fuse-debuginfoUpgrade python3-rgw-debuginfo | Jun 16, 2021 | May 27, 2021 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | May 27, 2021 |
| Redhat_linux | — | Upgrade libcephfs-develUpgrade ceph-fuse-debuginfoUpgrade ceph-mds-debuginfoUpgrade rbd-nbdUpgrade libtcmuUpgrade python-ceph-argparseUpgrade ceph-selinuxUpgrade python-cephfsUpgrade python-rgwUpgrade ceph-radosgwUpgrade rbd-mirror-debuginfoUpgrade ceph-mgr-debuginfoUpgrade librados-devel-debuginfoUpgrade ceph-debuginfoUpgrade ceph-common-debuginfoUpgrade librbd-develUpgrade python3-rbd-debuginfoUpgrade ceph-iscsiUpgrade rbd-mirrorUpgrade libradosstriper1-debuginfoUpgrade ceph-base-debuginfoUpgrade ceph-commonUpgrade python3-rgw-debuginfoUpgrade ceph-fuseUpgrade librados-develUpgrade python3-cephfs-debuginfoUpgrade tcmu-runnerUpgrade ceph-osd-debuginfoUpgrade libradosstriper1Upgrade libradospp-develUpgrade rbd-nbd-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-debugsourceUpgrade libcephfs2-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-mon-debuginfoUpgrade python3-cephfsUpgrade python3-radosUpgrade ceph-grafana-dashboardsUpgrade rbd-fuse-debuginfoUpgrade python3-rbdUpgrade python3-ceph-argparseUpgrade libcephfs2Upgrade ceph-ansibleUpgrade ceph-mdsUpgrade librgw2Upgrade python3-rados-debuginfoUpgrade librgw2-debuginfoUpgrade librgw-develUpgrade python3-rgwUpgrade ceph-base | Jun 16, 2021 | May 27, 2021 |
| Suse | — | Upgrade libcephfs-develUpgrade python3-radosUpgrade ceph-grafana-dashboardsUpgrade cephfs-shellUpgrade ceph-mgr-modules-coreUpgrade librados-develUpgrade librgw-develUpgrade python3-ceph-argparseUpgrade librbd1Upgrade libcephfs2Upgrade ceph-mgrUpgrade ceph-monUpgrade ceph-radosgwUpgrade ceph-commonUpgrade python3-ceph-commonUpgrade python3-rgwUpgrade ceph-prometheus-alertsUpgrade ceph-mdsUpgrade ceph-baseUpgrade ceph-testUpgrade ceph-mgr-k8seventsUpgrade ceph-fuseUpgrade rbd-nbdUpgrade python3-cephfsUpgrade rbd-fuseUpgrade ceph-immutable-object-cacheUpgrade rados-objclass-develUpgrade librados2Upgrade librgw2Upgrade cephadmUpgrade ceph-mgr-cephadmUpgrade libradospp-develUpgrade librbd-develUpgrade ceph-mgr-diskprediction-cloudUpgrade python3-rbdUpgrade cephUpgrade ceph-mgr-diskprediction-localUpgrade ceph-osdUpgrade ceph-mgr-rookUpgrade rbd-mirrorUpgrade ceph-mgr-dashboard | Jun 3, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade ceph-mgr-cephadmUpgrade radosgwUpgrade ceph-mgr-modules-coreUpgrade ceph-commonUpgrade ceph-mgr-dashboardUpgrade ceph-mgrUpgrade ceph-mgr-diskprediction-cloudUpgrade cephUpgrade ceph-baseUpgrade cephadmUpgrade ceph-mgr-rookUpgrade ceph-mgr-k8seventsUpgrade ceph-mgr-diskprediction-local | Jun 25, 2021 | May 27, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub