CVE-2021-3979

A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.

Score
CVSS 3.1 6.5 Medium
Status
Modified - secalert@redhat.com
Published
2022-08-25
Last modified
2025-11-03
Weaknesses
CWE-287, CWE-327

Affected products

References

 
 
© AVABIS GmbH privacypolicy about