CVE:CVE-2021-3979
CNNVD:CNNVD-202201-898
Red Hat Ceph Storage是美国红帽（Red Hat）公司的一套可扩展的、开放性的软件定义存储平台。
Red Hat Ceph Storage 中存在授权问题漏洞，攻击者可以利用在加密算法中错误地传递密钥长度的事实来创建一个非随机密钥，该密钥较弱，可被利用来丢失加密磁盘的机密性和完整性。
solution:Upgrade redhat ceph_storage to a higher version than 3.0,4.3,5.1,4.0,5.0,and avoid the version 3.0,4.3,5.1,4.0,5.0; Upgrade redhat openshift_container_storage to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat openshift_data_foundation to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat openstack_platform to a higher version than 13.0,and avoid the version 13.0; Upgrade redhat ceph_storage_for_ibm_z_systems to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat ceph_storage_for_power to a higher version than 4.0,and avoid the version 4.0; Upgrade fedoraproject fedora to a higher version than 35,37,and avoid the version 35,37