Alpine/ceph16: medium 6.1
A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to an httpOnly cookie. However, token cookies are used
Action: Upgrade ceph16 to 16.2.4-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 16.2.4-r0 | - |
Fixed versions
| 16.2.4-r0 |
Sources
published · modified · JSON