cve.bz

CVE-2020-1759

6.8 mediumEPSS 1.6%

Medium (6.8). EPSS 1.6% chance of exploitation in the next 30 days.

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.

Severity

CVSS 3.1

6.8 medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS
1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWEs
CWE-323, CWE-330
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON