Weak Encryption in IBM Security Identity Manager Virtual Appliance
CVE-2016-0366

3.7LOW

Key Information:

Vendor
IBM
Status
Security Privileged Identity Manager
Vendor
CVE Published:
21 February 2018

Summary

The IBM Security Identity Manager Virtual Appliance versions prior to 7.0.1.3-ISS-SIM-IF0001 are susceptible to a vulnerability that can be exploited by remote attackers. By leveraging weak encryption algorithms, these attackers may gain unauthorized access to sensitive information, posing a significant risk to system integrity and confidentiality.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21986260
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/112071
vdb-entryx_refsource_XF

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.