PT-2021-23085

CVE-2021-41096

·

تاريخ النشر

2021-09-27

·

تاريخ التحديث

2021-10-08

الوصف من

CVSS 3.1
7.5
عالية
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Rucky versions 2.2 and earlier for release builds Rucky versions 425 and earlier for nightly builds
Description The issue is related to the use of a weak cryptographic algorithm, specifically RSA/ECB/PKCS1Padding. As a workaround, one may disable an advance security feature if not required.
Recommendations For Rucky versions 2.2 and earlier for release builds, update to version 2.3 or later to resolve the issue. For Rucky versions 425 and earlier for nightly builds, update to version 426 or later to resolve the issue. As a temporary workaround, consider disabling the advance security feature if it is not required.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
GHSA-32M7-456V-WGFW
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾