NetSight
IP …
medium6.5

CVE-2021-3979

A key length flaw was found in Red Hat Ceph Storage.

Impact

A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.

Affected products

VendorProductAffected versions
RedhatCeph Storage
Versions 3.0, 4.3, 5.1, 4.0, 5.0
RedhatOpenshift Container Storage
Version 4.0
RedhatOpenshift Data Foundation
Version 4.0
RedhatOpenstack Platform
Version 13.0
RedhatCeph Storage For Ibm Z Systems
Version 4.0
RedhatCeph Storage For Power
Version 4.0
FedoraprojectFedora
Versions 35, 37

Weakness classification

CWE-327CWE-287

References