Weak Cryptographic Algorithms in IBM Security Guardium Data Encryption
CVE-2019-4160
5.9MEDIUM
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 13 January 2021
Summary
IBM Security Guardium Data Encryption version 3.0.0.2 utilizes cryptographic algorithms that do not meet expected security standards, potentially enabling attackers to decrypt sensitive information. This vulnerability poses a risk to data confidentiality, making it crucial for organizations to assess and mitigate their reliance on this version.
Affected Version(s)
Security Guardium Data Encryption 3.0.0.2
References
CVSS V3.1
Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved