Debian/ceph: medium 6.1
A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to an httpOnly cookie. However, token cookies are used
Action: Upgrade ceph to 14.2.21-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 14.2.21-1 | - |
Fixed versions
| 14.2.21-1 |
Sources
published · modified · JSON