Red Hat Security AdvisoryRHSA-2019:0911
Red Hat Ceph Storage 3.2 security, bug fix, and enhancement update
Released 2019-04-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 3.2 MON ceph-2:12.2.8-128.el7cp, ceph-base-2:12.2.8-128.el7cp, ceph-common-2:12.2.8-128.el7cp +17
- Red Hat Ceph Storage 3.2 OSD ceph-2:12.2.8-128.el7cp, ceph-base-2:12.2.8-128.el7cp, ceph-common-2:12.2.8-128.el7cp +16
- Red Hat Ceph Storage 3.2 Tools ceph-2:12.2.8-128.el7cp, ceph-ansible-3.2.15-1.el7cp, ceph-base-2:12.2.8-128.el7cp +20
Fixes 2 records
Priority LOW 39
Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0728 · Published 2018-12-13 · Partial fix CWE-200
Priority LOW 31
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02115 · Published 2018-06-11 · Partial fix · 5.2.0-beta1 CWE-79
