VDB
GCVE-110-MAGEIA-2021-126
GCVE-110-MAGEIA-2021-126
Advisory Published
A flaw was found in Ceph where Ceph stores mgr module passwords in clear text.
This issue can be found by searching the mgr logs for Grafana and dashboard
with passwords visible. The highest threat from this vulnerability is to
confidentiality (CVE-2020-25678).
A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user
authentication is stored by the frontend application in the browser’s
localStorage which is potentially vulnerable to attackers via XSS attacks. The
highest threat from this vulnerability is to data confidentiality and
integrity (CVE-2020-27839).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | ceph | 0 (affected), 15.2.9-1.mga8 (unaffected), 0 (affected), 15.2.9-1.mga8 (unaffected) | — |
| Mageia | libtorrent-rasterbar | 0 (affected), 1.2.13-1.mga8 (unaffected) | — |
Aliases
References
Browse GCVE Records
73,053 records in the GCVE database · Updated July 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.