CVE-2021-3979

Name of the Vulnerable Software and Affected Versions Red Hat Ceph Storage (affected versions not specified)

Description A key length flaw was found in the encryption algorithm of Red Hat Ceph Storage. This flaw allows an attacker to create a non-random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks. The vulnerability is related to the incorrect passing of the key length in the encryption algorithm. An attacker can exploit this flaw to gain access to confidential data and compromise their integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.