CVE-2020-27839

A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the browser’s localStorage which is potentially vulnerable to attackers via XSS attacks. The highest threat from this vulnerability is to data confidentiality and integrity.
References
Link Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1901330 Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:ceph:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:ceph:*:*:*:*:*:*:*:*

History

03 Jun 2021, 18:37

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : 3.5
v3 : 5.4
References (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1901330 - (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1901330 - Issue Tracking, Vendor Advisory
CPE cpe:2.3:a:redhat:ceph:*:*:*:*:*:*:*:*

27 May 2021, 02:11

Type Values Removed Values Added
CWE CWE-522

26 May 2021, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2021-05-26 22:15

Updated : 2024-02-04 21:47


NVD link : CVE-2020-27839

Mitre link : CVE-2020-27839

CVE.ORG link : CVE-2020-27839


JSON object : View

Products Affected

redhat

  • ceph
CWE
CWE-522

Insufficiently Protected Credentials