tocsin

Alpine/ceph16: medium 6.1

A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to an httpOnly cookie. However, token cookies are used

Action: Upgrade ceph16 to 16.2.4-r0 or later.

Affected

introducedfixedlast affected
016.2.4-r0-

Fixed versions

16.2.4-r0

Sources

published · modified · JSON