Cryptographic Vulnerability in IBM Watson Developer Cloud Services on Bluemix
CVE-2016-0391

9.8CRITICAL

Key Information:

Vendor
IBM
Status
Watson Developer Cloud
Vendor
CVE Published:
2 July 2016

Summary

The IBM Watson Developer Cloud services hosted on the Bluemix platform exhibit a significant cryptographic vulnerability due to improper random number generation for service-instance credentials. This flaw potentially enables remote attackers to compromise cryptographic protection mechanisms, facilitating brute-force attacks and unauthorized access to sensitive service instances.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21982615
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.