Cryptographic Vulnerability in IBM Watson Developer Cloud Services on Bluemix
CVE-2016-0391
9.8CRITICAL
Summary
The IBM Watson Developer Cloud services hosted on the Bluemix platform exhibit a significant cryptographic vulnerability due to improper random number generation for service-instance credentials. This flaw potentially enables remote attackers to compromise cryptographic protection mechanisms, facilitating brute-force attacks and unauthorized access to sensitive service instances.
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved