The JSON Web Token (JWT) used for user authentication is stored the by the frontend application in the browser’s localStorage.
Created ceph tracking bugs for this issue:
Affects: fedora-all [bug 1906954]
https://tracker.ceph.com/issues/44591 attaching ceph tracker for reference.
* Red Hat Ceph Storage 3 is not affected as it does not use authentication for the dashboard.
* Red Hat OpenStack Platform deployments use the ceph package directly from the Ceph channel; the RHOSP package will not be updated at this time.
* Red Hat OpenShift Container Storage (RHOCS) 4 shipped ceph package for the usage of RHOCS 4.2 only which has reached End of Life. The shipped version of ceph package is neither used nor supported with the release of RHOCS 4.3.
* Red Hat Enterprise Linux 8 does not include the ceph dashboard component.
This issue has been addressed in the following products:
Red Hat Ceph Storage 4.2
Via RHSA-2021:2445 https://access.redhat.com/errata/RHSA-2021:2445
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):