CVEvulnerability

CVE-2021-3979

6.5 MEDIUM Published 2022-08-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-287, CWE-327

Description

A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.

Affected configurations

• redhat ceph storage 3.0 • redhat ceph storage 4.3 • redhat ceph storage 5.1 • redhat openshift container storage 4.0 • redhat openshift data foundation 4.0 • redhat openstack platform 13.0 • redhat ceph storage for ibm z systems 4.0 • redhat ceph storage 4.0 • redhat ceph storage 5.0 • redhat ceph storage for power 4.0 • fedoraproject fedora 35 • fedoraproject fedora 37

Related

Weakness · CWE (2)

  • CWE-287 Improper Authentication weakness
  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References