Weak Encryption in IBM Security Identity Manager Virtual Appliance
CVE-2016-0366
3.7LOW
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 21 February 2018
Summary
The IBM Security Identity Manager Virtual Appliance versions prior to 7.0.1.3-ISS-SIM-IF0001 are susceptible to a vulnerability that can be exploited by remote attackers. By leveraging weak encryption algorithms, these attackers may gain unauthorized access to sensitive information, posing a significant risk to system integrity and confidentiality.
References
CVSS V3.1
Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved