CVE-2021-3979CWE-327

A key length flaw was found in Red Hat Ceph Storage

published August 25, 2022

CVSS
—
EPSS
1%
Percentile
47.9
In the wild
Unconfirmed
What it is

A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00597 · 47.9th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2022-08-25T00:00Z
EPSS history
Timeline
  • 25 AUG 00:00Z
    A key length flaw was found in Red Hat Ceph Storage
    cvelistv5