ceph-mgr-rook

Direct Vulnerabilities

Known vulnerabilities in the ceph-mgr-rook package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Directory Traversal

*
  • M
Cross-site Scripting (XSS)

*
  • M
Heap-based Buffer Overflow

*
  • H
Use of a Broken or Risky Cryptographic Algorithm

*
  • H
Improper Verification of Cryptographic Signature

*
  • H
Missing Authorization

*
  • H
Use of Multiple Resources with Duplicate Identifier

*
  • H
Cross-site Scripting (XSS)

*
  • M
Improperly Controlled Modification of Dynamically-Determined Object Attributes

*
  • H
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

*
  • M
Improper Verification of Source of a Communication Channel

*
  • H
Improper Input Validation

*
  • M
Least Privilege Violation

*
  • M
Cross-site Scripting (XSS)

*
  • H
Insufficient Verification of Data Authenticity

*
  • M
Cross-site Scripting (XSS)

*
  • M
Inefficient Regular Expression Complexity

*
  • H
Cleartext Storage of Sensitive Information

<2:14.2.11-95.el7cp
  • H
Improper Input Validation

<2:14.2.11-147.el7cp
  • M
Covert Timing Channel

<2:14.2.22-110.el7cp
  • H
Placement of User into Incorrect Group

*
  • M
Incorrect Authorization

*
  • M
Resource Exhaustion

*
  • L
Cross-site Scripting (XSS)

*
  • M
Directory Traversal

*
  • M
Improper Authentication

<2:14.2.22-110.el7cp
  • M
Out-of-bounds Read

*
  • H
Cross-site Scripting (XSS)

<2:14.2.11-181.el7cp
  • M
Improper Input Validation

<2:14.2.22-110.el7cp
  • H
Improper Authentication

<2:14.2.11-181.el7cp
  • H
Insufficiently Protected Credentials

<2:14.2.11-181.el7cp
  • H
Insufficiently Protected Credentials

<2:14.2.11-95.el7cp
  • H
Authentication Bypass

<2:14.2.11-95.el7cp
  • M
Reusing a Nonce

<2:14.2.8-111.el7cp
  • H
Cleartext Storage of Sensitive Information

<2:14.2.11-147.el7cp
  • M
Cross-site Scripting (XSS)

<2:14.2.8-81.el7cp
  • M
HTTP Response Splitting

<2:14.2.8-81.el7cp
  • M
Cross-site Scripting (XSS)

*
  • M
Resource Exhaustion

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Memory Leak

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*