CVE-2020-1759
Medium
Description
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
SeverityMedium
CVSS6.4
Exploit probability—
Product
Redhat Ceph Storage
PublishedApr 13, 2020
First seenApr 13, 2020
Weakness typeCWE-323CWE-323
How to fix
Update
- linuxfoundation ceph14.2.21 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat ceph_storage | 4.0 | — |
| redhat openshift | 4.2 | — |
| redhat openstack | 15 | — |
| linuxfoundation ceph | v < 14.2.21 | 14.2.21 |
| fedoraproject fedora | 31 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.