PT-2021-23085

CVE-2021-41096

·

Published

2021-09-27

·

Updated

2021-10-08

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Rucky versions 2.2 and earlier for release builds Rucky versions 425 and earlier for nightly builds
Description The issue is related to the use of a weak cryptographic algorithm, specifically RSA/ECB/PKCS1Padding. As a workaround, one may disable an advance security feature if not required.
Recommendations For Rucky versions 2.2 and earlier for release builds, update to version 2.3 or later to resolve the issue. For Rucky versions 425 and earlier for nightly builds, update to version 426 or later to resolve the issue. As a temporary workaround, consider disabling the advance security feature if it is not required.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-32M7-456V-WGFW
Found an issue in the description? Have something to add? Feel free to write us 👾