Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-1759
HistoryApr 13, 2020 - 12:00 a.m.

CVE-2020-1759

2020-04-1300:00:00
ubuntu.com
ubuntu.com
10

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

0.002 Low

EPSS

Percentile

56.2%

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift
Container Storage 4.2 where, A nonce reuse vulnerability was discovered in
the secure mode of the messenger v2 protocol, which can allow an attacker
to forge auth tags and potentially manipulate the data by leveraging the
reuse of a nonce in a session. Messages encrypted using a reused nonce
value are susceptible to serious confidentiality and integrity attacks.

Bugs

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

0.002 Low

EPSS

Percentile

56.2%