ceph-mgr-dashboard vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the ceph-mgr-dashboard package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Insufficient Verification of Data Authenticity	*
M Cross-site Scripting (XSS)	*
M NULL Pointer Dereference	*
M Inefficient Regular Expression Complexity	*
H Cleartext Storage of Sensitive Information	<2:14.2.11-95.el7cp
H Improper Input Validation	<2:14.2.11-147.el7cp
M Covert Timing Channel	<2:14.2.22-110.el7cp
M Improper Handling of URL Encoding (Hex Encoding)	*
H Placement of User into Incorrect Group	*
M Incorrect Authorization	*
M Resource Exhaustion	*
L Cross-site Scripting (XSS)	*
M Directory Traversal	*
M Improper Authentication	<2:14.2.22-110.el7cp
M Out-of-bounds Read	*
H Cross-site Scripting (XSS)	<2:14.2.11-181.el7cp
M Improper Input Validation	<2:14.2.22-110.el7cp
H Improper Authentication	<2:14.2.11-181.el7cp
H Insufficiently Protected Credentials	<2:14.2.11-181.el7cp
H Insufficiently Protected Credentials	<2:14.2.11-95.el7cp
H Authentication Bypass	<2:14.2.11-95.el7cp
M Reusing a Nonce	<2:14.2.8-111.el7cp
H Cleartext Storage of Sensitive Information	<2:14.2.11-147.el7cp
M Cross-site Scripting (XSS)	<2:14.2.8-81.el7cp
M HTTP Response Splitting	<2:14.2.8-81.el7cp
M Cross-site Scripting (XSS)	*
M Resource Exhaustion	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Memory Leak	*
M Improper Input Validation	*
M Improper Input Validation	*