Lucene search

[email protected]CVE-2021-3979

HistoryAug 25, 2022 - 8:15 p.m.

CVE-2021-3979

2022-08-2520:15:09

CWE-287

CWE-327

[email protected]

web.nvd.nist.gov

cve-2021-3979

red hat ceph storage

encryption algorithm

key length flaw

confidentiality

integrity

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

JSON

A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.

Affected configurations

NVD

Node

redhatceph_storageMatch3.0

redhatceph_storageMatch4.3

redhatceph_storageMatch5.1

redhatopenshift_container_storageMatch4.0

redhatopenshift_data_foundationMatch4.0

redhatopenstack_platformMatch13.0

redhatceph_storage_for_ibm_z_systemsMatch4.0

Node

redhatenterprise_linuxMatch8.0

AND

redhatceph_storageMatch4.0

redhatceph_storageMatch5.0

redhatceph_storage_for_powerMatch4.0

Node

redhatenterprise_linuxMatch7.0

AND

redhatceph_storageMatch4.0

redhatceph_storageMatch5.0

redhatceph_storage_for_powerMatch4.0

Node

fedoraprojectfedoraMatch35

fedoraprojectfedoraMatch37

CPENameOperatorVersion
redhat:ceph_storageredhat ceph storageeq3.0
redhat:ceph_storageredhat ceph storageeq4.3
redhat:ceph_storageredhat ceph storageeq5.1
redhat:openshift_container_storageredhat openshift container storageeq4.0
redhat:openshift_data_foundationredhat openshift data foundationeq4.0
redhat:openstack_platformredhat openstack platformeq13.0
redhat:ceph_storage_for_ibm_z_systemsredhat ceph storage for ibm z systemseq4.0

CPE	Name	Operator	Version
redhat:ceph_storage	redhat ceph storage	eq	3.0
redhat:ceph_storage	redhat ceph storage	eq	4.3
redhat:ceph_storage	redhat ceph storage	eq	5.1
redhat:openshift_container_storage	redhat openshift container storage	eq	4.0
redhat:openshift_data_foundation	redhat openshift data foundation	eq	4.0
redhat:openstack_platform	redhat openstack platform	eq	13.0
redhat:ceph_storage_for_ibm_z_systems	redhat ceph storage for ibm z systems	eq	4.0

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "ceph",
    "versions": [
      {
        "version": "Not-Known",
        "status": "affected"
      }
    ]
  }
]